Administrator's Guide. HP BladeSystem PC Blade Enclosure Integrated Administrator v4.40

Transcription

1 Administrator's Guide HP BladeSystem PC Blade Enclosure Integrated Administrator v4.40

2 Copyright Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Microsoft and Windows are trademarks of Microsoft Corporation in the U.S. and other countries. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. This document contains proprietary information that is protected by copyright. No part of this document may be photocopied, reproduced, or translated to another language without the prior written consent of Hewlett-Packard Company. User Guide HP BladeSystem PC Blade Enclosure Integrated Administrator v4.40 Fourth Edition (May 2009) Third Edition (January 2009) Second Edition (February 2008) First Edition (May 2007) Document Part Number:

3 About This Book WARNING! Text set off in this manner indicates that failure to follow directions could result in bodily harm or loss of life. CAUTION: Text set off in this manner indicates that failure to follow directions could result in damage to equipment or loss of information. NOTE: Text set off in this manner provides important supplemental information. ENWW iii

4 iv About This Book ENWW

5 Table of contents 1 About This Guide Audience Assumptions... 1 Important Safety Information... 1 Symbols on Equipment... 1 Related Documents... 2 Getting Help... 2 Contact HP... 2 Support and Troubleshooting... 2 HP Web Site HP PC Blade Enclosure System Software Features HP PC Blade Enclosure Integrated Administrator... 3 Integrated Administrator Features... 3 Dedicated Local Area Network (LAN) Connectivity... 3 Simple Network Management Protocol (SNMP) Alerts from Integrated Administrator to a Management Console Alerts from Integrated Administrator to an Account (AlertMail)... 4 Remote Access and Control... 4 User Administration and Security... 4 Automatic Network Configuration... 5 Network Time Protocol (NTP)... 5 SOAP Interface... 5 Power Reporting... 5 Enclosure Power Management and Power Redundancy... 5 Integration with the HP Systems Insight Manager Utility... 6 Integration with HP Session Allocation Manager (SAM) Utility... 6 Event Notification... 6 Overview of HP BladeSystem Software Tools... 6 Blade ROM-Based Setup Utility (RBSU)... 6 Headless Operation... 7 ProLiant Essentials Rapid Deployment Pack... 7 HP Systems Insight Manager... 7 Enclosure Self Recovery (ESR)... 7 HP PC Blade Enclosure Management System and Utilities... 7 ENWW v

6 3 Getting Started Reviewing Configuration Tools and Information... 8 Identifying Integrated Administrator Components... 9 Determining the Integrated Administrator s Initial IP Address... 9 Requirements for Local Client Devices Default HP BladeSystem PC Blade Switch Accounts and Passwords Default Values for the Integrated Administrator Determining the IP Address Using the Local Console Setting Up the Web-Based User Interface Additional Steps Web Browser Interface Accessing the Web-based User Interface Web-Based Navigation Top Panel Left Panel Deck Panel Enclosure Tab Enclosure Information Network Configuration SNMP Configuration Power Readings Virtual Buttons System Log System Log Policy Enclosure Power Management Tab Bays Tab Bay List Bay Power Consumption Bay Temperature Bay Information Remote Console Virtual Buttons Console Log Administration Tab User List Group List Add User Add Group View/Modify User View/Modify Group Update IA Firmware Configuration Scripts vi ENWW

7 Event List Tab Event Log Policy Interconnect Tab Command Line Interface Accessing the Command Line Interface Accessing Remotely through the Management Connector Accessing Locally through the Console Connector Operating the Command Line Interface General Commands General Management Commands User Account Commands Enclosure Network Configuration Commands Enclosure Management Commands Blade PC Bay Management Commands Command Line Event Messages Functionality Exclusive to the Command Line Interface Setting Up the System User Permissions Customizing the Enclosure Settings Modifying Enclosure and Rack Names Modifying the Asset Tag Number Modifying the Date and Time Setting Up User Accounts Adding a Group Adding a User Enabling Remote Console Sessions to Blade PCs Setting Up AlertMail Alerts Setting Up IP Security Setting Up Automatic Network Time Protocol Configuration (NTP) Configuring SNMP Support Entering a Community String Modifying the System Location Modifying the System Contact Information Adding Trap Targets Removing Trap Targets Modifying Trap Policy Configuring SOAP Support Tasks Enabling SOAP Interface Disabling SOAP Interface ENWW vii

8 Supported SOAP Interface Commands Performing Common Administrative Tasks Managing Blade PC Bays Opening a Remote Console Session to a Blade PC Accessing the ROM-Based Setup Utility for a blade PC Reviewing Activity for a Blade PC Powering Off the Blade PC Identifying a Blade PC Using the Unit Identification LED Managing the Enclosure Reviewing the Activity of the Enclosure Identifying the Enclosure Using the Unit Identification LED Generating an Enclosure Summary Identifying Problem Components Managing Users Modifying a User s Rights to Blade PC Bays Creating a New Group with the Updated Access Rights Modifying Group Rights to Blade PC Bays Disabling and Deleting User Accounts Deleting a User Account Deleting Group Accounts Performing Advanced Functions Replicating the Configuration of the Integrated Administrator Administering Security Certificates Creating a Certificate Request Downloading a Security Certificate Key-Based SSH Authentication Configuring Blade PC Boot Order Powering Off the Enclosure Disabling Network Protocols Upgrading the Integrated Administrator Firmware Configuring the Update Feature Recovering a Lost Administrator Password Launching Flash Disaster Recovery Appendix A Command Line Conventions Appendix B Error Messages Warning Messages Enclosure Warning Messages Blade PC Warning Messages Administration Warning Messages viii ENWW

9 Error Messages Enclosure Error Messages Blade PC Bay Error Messages Administration Error Messages Appendix C Blade PC Diagnostic Messages Appendix D Maskable Enclosure System Log Messages Appendix E Maskable Enclosure Event Messages Appendix F Troubleshooting Appendix G Event Icons and Details Appendix H Power Management and Redundant Power Supply Appendix I Factory Default Settings Enclosure Users Groups Network Protocol Appendix J Time Zone Settings Universal Africa Asia Europe Oceania Polar Americas Appendix K Open Source Availability Appendix L Supported SNMP Traps Index ENWW ix

10 x ENWW

11 1 About This Guide Audience Assumptions This guide is for the person who installs, administers, and troubleshoots HP Blade PC solutions. HP assumes you are qualified in the servicing of computer equipment and trained in recognizing hazards in products with hazardous energy levels. Important Safety Information WARNING! Before installing this product, read the Important Safety Information document included with the system. Symbols on Equipment The following symbols may be placed on equipment to indicate the presence of potentially hazardous conditions: Table 1-1 Equipment Symbols Indicating Potentially Hazardous Conditions This symbol, in conjunction with any of the following symbols, indicates the presence of a potential hazard. The potential for injury exists if warnings are not observed. Consult your documentation for specific details. This symbol indicates the presence of hazardous energy circuits or electric shock hazards. Refer all servicing to qualified personnel. WARNING: To reduce the risk of injury from electric shock hazards, do not open this enclosure. Refer all maintenance, upgrades, and servicing to qualified personnel. This symbol indicates the presence of electric shock hazards. The area contains no user or field serviceable parts. Do not open for any reason. WARNING: To reduce the risk of injury from electric shock hazards, do not open this enclosure. This symbol on an RJ-45 receptacle indicates a network interface connection. WARNING: To reduce the risk of electric shock, fire, or damage to the equipment, do not plug telephone or telecommunications connectors into this receptacle. This symbol indicates the presence of a hot surface or hot component. If this surface is contacted, the potential for injury exists. WARNING: To reduce the risk of injury from a hot component, allow the surface to cool before touching. ENWW Audience Assumptions 1

12 Table 1-1 Equipment Symbols Indicating Potentially Hazardous Conditions (continued) These symbols, on power supplies or systems, indicate that the equipment is supplied by multiple sources of power. WARNING: To reduce the risk of injury from electric shock, remove all power cords to completely disconnect power from the system. This symbol indicates that the component exceeds the recommended weight for one individual to handle safely. WARNING: To reduce the risk of personal injury or damage to the equipment, observe local occupational health and safety requirements and guidelines for manual material handling. Related Documents For additional information on the topics covered in this guide, refer to the following documents: Network Considerations Guide white paper QuickSpecs Setup and Installation Guide: HP BladeSystem bc2000 and bc2500 Blade PC and PC Blade Enclosure Setup and Installation Guide: HP BladeSystem bc2200 and bc2800 Blade PC and HP BladeSystem PC Blade Enclosure G2 HP Rack 9000 and Series installation and best practices white paper Installation Guide: HP BladeSystem PC Blade Switch Command Line Interface Reference Guide: HP BladeSystem PC Blade Switch Embedded Web System User Guide for the HP BladeSystem PC Blade Switch Getting Help Contact HP If you have a question about the HP PC Blade Enclosure and have exhausted the information in this guide, you can get additional information and other help in the following locations: The Contact HP Web site provides various ways to contact HP, including online chat, , and telephone. Access this Web site at Support and Troubleshooting HP Web Site The HP Support and Troubleshooting Web site allows you to download software and drivers and search for support and troubleshooting information for specific products. Access this Web site at The HP Web site has information on this product as well as the latest drivers and flash ROM images. You can access the HP Web site at 2 Chapter 1 About This Guide ENWW

13 2 HP PC Blade Enclosure System Software Features The HP BladeSystem offers an extensive set of features and optional tools to support effective blade PC management and software deployment. This chapter describes the HP PC Blade Enclosure Integrated Administrator and provides a brief overview of software associated with the system. HP PC Blade Enclosure Integrated Administrator The HP PC Blade Enclosure Integrated Administrator is a centralized management and monitoring system for the HP PC Blade Enclosure and blade PCs. The Integrated Administrator acts as a combination console server and remote power controller, enabling in-band (default) or out-of-band, secure, serial console connections to all blade PCs in the enclosure. The Integrated Administrator provides enclosure health, blade health, and enables remote blade manageability. Integrated Administrator features can be accessed from any network-based client. The Integrated Administrator can provide remote access to any authorized network client, sends alerts, and provides many other blade PC management functions. The Integrated Administrator subsystem is embedded on a module included with each interconnect tray and includes an intelligent microprocessor, secure memory, and a dedicated network interface that can be configured for either in-band (default) or out-of-band remote access. This design makes the Integrated Administrator independent of the host blade PC and its operating system. Integrated Administrator Features The following subsections describe Integrated Administrator functions that deliver management of the enclosure and blade PCs. Dedicated Local Area Network (LAN) Connectivity Each Integrated Administrator provides a dedicated network connection. The uplink port 42 can autoselect speeds between 10 Mbps and 100 Mbps. When the PC Blade Switch (optional) is installed, by default the Integrated Administrator is configured to route through a Gigabit uplink connector using Virtual LANs (VLANs), eliminating the need for a separate management network. NOTE: The default configuration for the HP BladeSystem PC Blade Switch option has the dedicated IA port and both uplink ports 45 and 46 in the same VLAN. ENWW HP PC Blade Enclosure Integrated Administrator 3

14 Simple Network Management Protocol (SNMP) Alerts from Integrated Administrator to a Management Console The Integrated Administrator provides notification of enclosure problems. Using a management console, you can access various alerts, such as hardware health and status change events, using SNMP traps. The CPQRACK.MIB file contains HP-specific SNMP Object Identifiers (OIDs) and traps for managing the enclosure infrastructure and blades. The Integrated Administrator 4.4 implements support for CPQRACK version Alerts from Integrated Administrator to an Account (AlertMail) AlertMail enables the Integrated Administrator to send system events by instead of using SNMP traps. AlertMail is completely independent of SNMP, and both can be enabled at the same time. AlertMail uses standard Simple Mail Transfer Protocol (SMTP) commands to communicate with any SMTP capable mail server or in addition to SMTP relay agent. Remote Access and Control The Integrated Administrator provides remote functionality to access a limited text-only console of the host blade PC, change the state of the Unit Identification LED on an enclosure or any of its blade PCs, and power up, power down, or reboot a blade PC or groups of blade PCs. The Integrated Administrator displays alerts regardless of the state of the blade PC and can integrate with industry standard SNMP management tools such as HP Systems Insight Manager using SNMP version 1 to provide alerts and diagnostics for the system. If a blade PC does not respond, this feature enables an administrator to initiate a cold reboot to bring the blade PC back online. The Integrated Administrator can be used to remotely operate a power button or Unit Identification LED (UID) of any blade PC within the enclosure. The Integrated Administrator is fully accessible by common Web browsers. The Integrated Administrator also has a command line interface (CLI) accessible using Secure Shell (encrypted) or Telnet (unencrypted) protocols, providing extensive management capability to remote network users. Local users can access the CLI by attaching a client computer (using a terminal emulator) to the Integrated Administrator s console (RS-232 serial) port. NOTE: With a Telnet session, all data - including passwords - are passed as clear text. User Administration and Security The Integrated Administrator supports up to 25 users with customizable access rights and login names. Groups are first assigned bays, and then users are given membership to those groups. This groupcentered methodology is designed to facilitate user management across blade PCs. The Integrated Administrator provides strong security for remote management in distributed IT environments by using industry standard Secure Sockets Layer (SSL) encryption of HTTP data transmitted across the network. SSL encryption (up to 128-bit) ensures that the HTTP information is secure as it travels across the network. You can encrypt all remote console data as well. 4 Chapter 2 HP PC Blade Enclosure System Software Features ENWW

15 The Integrated Administrator provides secure password encryption, tracking all login attempts and maintaining a record of all login failures. The Integrated Administrator also provides the following additional security features: User actions logged in the Integrated Administrator System Log Login legal warning IP Security allows an administrator to define a set of IP addresses that are the only ones allowed to connect to the services provided (Secure Shell (SSH), HTTP, Hypertext Transfer Protocol over Secure Socket Layer (HTTPS), Telecommunications network (TELNET), SNMP). This means that an administrator can make sure only a certain set of machines have access to the Integrated Administrator. Automatic Network Configuration The Integrated Administrator provides automatic network configuration of the IP address and host name using Dynamic Host Configuration Protocol (DHCP) and Dynamic DNS/WINS. The Integrated Administrator comes with a default name and DHCP client that leases an IP address from the DHCP server on the network. For networks that do not use DHCP, the Integrated Administrator can use a static IP configuration. Network Time Protocol (NTP) Automatic time configuration allows the Integrated Administrator to synchronize its date and time with a compatible Network Time Protocol (NTP) Time Server. SOAP Interface The Integrated Administrator provides a handful of commands via the Simple Object Access Protocol (SOAP) interface for manageability tools that utilize SOAP. This interface provides a handful of commands for inventory and power management of the enclosure and blades managed by the IA. All Administrator access level accounts can use the SOAP interface, and it is enabled using a command line (CLI) command or the graphical user interface (GUI). Power Reporting The Integrated Administrator collects power measurements from bc2000, bc2200, bc2500, and bc2800 blades and reports them via the CLI and GUI. These blades self measure using hardware measurement components specifically in the bc2000, bc2200, bc2500, and bc2800 blades. Using these measurements, a +-10% estimate of power consumption for the enclosure is calculated. Additionally, the BladeSystem PC Blade Enclosure G2 utilizes new self-measuring power supplies that are used to calculate a measured, rather than estimated, power consumption. The overall enclosure power consumption estimate can be collected by the CLI, GUI, and SOAP interface. Enclosure Power Management and Power Redundancy The IA will attempt to ensure all blades, regardless of blade type, continue to run at full power in the event of a loss of a single power supply. PC Blade Enclosure G2 enclosures running with a line voltage of 200V are always AC redundant. For PC Blade Enclosures or PC Blade Enclosure G2 enclosures running at <200V, the IA will allow blades to continue to run full speed after the loss of a power supply as long as the blade population doesn t exceed the maximum redundant power budget. The IA reports a value for the maximum redundant, resilient, and total capacity and uses that in power managing the enclosure. These values ENWW Integrated Administrator Features 5

16 are compared to the allocated power budget which is based on blade configuration to determine the appropriate course of action for ensuring enclosure power supply redundancy. For more information, see Power Management and Redundant Power Supply on page 160. Integration with the HP Systems Insight Manager Utility The Integrated Administrator provides full integration with the HP Systems Insight Manager utility under key operating environments. This integration provides: Support for SNMP management Support for SNMP trap delivery to a HP Systems Insight Manager console Management processor The HP Systems Insight Manager utility adds support for a new device type, the management processor. All Integrated Administrators (in HP PC Blade Enclosure) on the network are discovered in the HP Systems Insight Manager utility as management processors. The management processors are associated with the blade PCs they manage. The Integrated Administrator hyperlinks The HP Systems Insight Manager utility provides a hyperlink on the blade PC device page to launch and connect to the Integrated Administrator. Grouping of Integrated Administrator processors All Integrated Administrator management processors can be grouped together logically and displayed on one page in HP Systems Insight Manager. This capability provides access to all Integrated Administrators on the network from one point in HP Systems Insight Manager. For more information on the HP Systems Insight Manager utility, refer to For configuring your deployment for SNMP, please consult the Network Considerations white paper. Integration with HP Session Allocation Manager (SAM) Utility The Integrated Administrator provides features for the HP Session Allocation Manager software to manage and report on the hardware. HP SAM leverages the SOAP interface that can gather power reporting data or power cycle the blades within the enclosure. The Integrated Administrator has a builtin account that is provided for ease of implementing within a deployment that uses HP SAM. This account is disabled by default. Event Notification The Integrated Administrator provides real-time event notifications for an enclosure. When an event occurs, the Integrated Administrator notifies connected users by generating an event text message in the command line interface (CLI) or via text and selectable icon within the event log page in the GUI that the user can click to view more details. Overview of HP BladeSystem Software Tools The following subsections described tools and utilities supported by the HP BladeSystem blade PC systems to facilitate monitoring and management of the enclosure. Blade ROM-Based Setup Utility (RBSU) The Blade RBSU (F10) performs a wide range of configuration activities and provides access to numerous settings, including those for system devices, operating system selection, and boot controller 6 Chapter 2 HP PC Blade Enclosure System Software Features ENWW

17 order. RBSU (F10) is also fully compatible with remote serial console mode using the Integrated Administrator. Headless Operation HP bc-series blade PCs include Video Graphics Array (VGA), keyboard, mouse, and Universal Serial Bus (USB) interfaces; however, these blade PCs are designed primarily for headless operation and management with no keyboard or monitor attached. ProLiant Essentials Rapid Deployment Pack The ProLiant Essentials Rapid Deployment Pack features a graphical deployment console, which provides intuitive drag-and-drop events, such as scripts and images, to deploy the operating systems and applications on any combination of blade PCs installed in the enclosures. With the Rapid Deployment Pack, users can automatically install pre-defined configurations on newly installed blade PCs. For more information about the Rapid Deployment Pack, refer to an authorized reseller, the Rapid Deployment CD that ships with the enclosure, or go to HP Systems Insight Manager HP Systems Insight Manager is a software utility designed for collecting blade PC information, including fault conditions, performance, security, remote management, and recovery services. The HP BladeSystem is fully compatible with the HP Systems Insight Manager utility. Enclosure Self Recovery (ESR) ESR is a self-monitoring reliability feature of the Integrated Administrator. If the Integrated Administrator does not boot or hangs during operation, ESR automatically resets the Integrated Administrator for an attempted self-recovery. The blade PCs and interconnect tray are not affected by ESR. HP PC Blade Enclosure Management System and Utilities The HP PC Blade Enclosure Management System and Utilities provide a full suite of configuration and management interfaces and tools for the HP PC Blade Enclosure (option). Both Web and console interfaces are provided for management of the interconnect switch and enclosure. You can configure both interfaces to require a valid user name and password for authentication. Remote Network Monitoring (RMON) (for the switch) and SNMP manageability are supported. You can also save the interconnect switch configuration to a Trivial File Transfer Protocol (TFTP) server as backups and as templates for preconfiguring other switches. ENWW Overview of HP BladeSystem Software Tools 7

18 3 Getting Started The HP PC Blade Enclosure Integrated Administrator enables monitoring and management of all functions within an enclosure, including functions specific to the blade PCs housed within it. Once configured, the Integrated Administrator provides these features through both a Web-based user interface and CLI. This chapter addresses first-time configuration of the Integrated Administrator after the enclosure is installed and powered up in a rack: Reviewing configuration tools and information Identifying the Integrated Administrator connectors Determining the Integrated Administrator initial IP address Setting up the Web-based user interface Additional steps Help Reviewing Configuration Tools and Information The Integrated Administrator is ready for operation immediately after powering up. The following features and information are designed to facilitate the setup and management of the Integrated Administrator: Each Integrated Administrator ships with a unique preconfigured Administrator password and host name. If the network uses Dynamic Domain Name System (DNS) or Windows Internet Name Service (WINS), you can access the Integrated Administrator using the factory-configured host name. NOTE: The preconfigured Administrator password and host name are displayed on the Integrated Administrator Default Network Settings Tag (settings tag) attached to the interconnect tray. If the network uses Dynamic Host Configuration Protocol (DHCP), an IP address can be automatically assigned to the Integrated Administrator. The blade PC health service (if installed on the blade) provides the Integrated Administrator with the name as defined within the operating system of the blade PC and operating system type for each blade PC. 8 Chapter 3 Getting Started ENWW

19 CAUTION: Without an Advanced Configuration and Power Interface- (ACPI) compliant operating system, the Integrated Administrator cannot gracefully shut down a blade PC. This condition may result in the permanent loss of critical data. Identifying Integrated Administrator Components Each HP PC Blade Enclosure interconnect tray ships with the Integrated Administrator module already installed and provides external connectivity using two connectors on the rear panel. Table 3-1 Integrated Administrator Rear Panel Components Item Description 1 Management (10/100 Ethernet) connector for remote access through a Web-based user interface, Telnet, or Secure Shell. 2 Console (serial) connector for local access to the command line interface using a laptop computer. 3 Integrated Administrator reset button. 4 Integrated Administrator health LED 5 Enclosure Unit Identification button/led 6 Fan cage health status LED 7 Power button/ status LED combination Determining the Integrated Administrator s Initial IP Address HP recommends that you connect a local client device, such as a laptop computer, to the console (serial) connector in order to determine the initial IP address used by the network to recognize the Integrated Administrator. After using that IP address to access the Integrated Administrator locally using the console (serial) connector, you can use the Integrated Administrator default values to complete the initial configuration. ENWW Identifying Integrated Administrator Components 9

20 The organization of this section reflects this process: Requirements for local client devices Default values for the Integrated Administrator Determining the IP address using the local console Requirements for Local Client Devices You can access the Integrated Administrator locally using the serial connector on the rear panel of the enclosure using a local client device, such as a laptop computer. The local client device must run a terminal emulator, such as HyperTerminal for Windows systems or Kermit for Linux systems. The terminal emulator must operate at the following settings: Bits per second: 9600 Bits: 8 Parity: None Stop bits: 1 Flow control: none Emulation: VT100 Backspace key sends Ctrl-H Default HP BladeSystem PC Blade Switch Accounts and Passwords The HP BladeSystem PC Blade Switch, part number PX829AW and PX830AW has one account: Username: switch Default Password: switcha The ProLiant BL e-class C-GbE Interconnect Switch, part number B21 and the HP e-class GbE Switch, part number DW367A has two default accounts. Each account corresponds to one of its two unique integrated switches: Username: switcha Default Password: switcha Username: switchb Default Password: switchb Default Values for the Integrated Administrator The Integrated Administrator is configured with a default user name, password, and DNS name. A settings tag with the preconfigured values is attached to the interconnect tray containing the Integrated 10 Chapter 3 Getting Started ENWW

21 Administrator module. There is also a built-in administrator account for SOAP access, which is disabled by default. Username: SAM Default Password: SamUser123 NOTE: This administrator privileged account is disabled by default. You cannot login using this account until you enable the SAM account. It is important that the account password is changed from the default account password if the account is enabled prior to normal usage by HP SAM. Lastly, the SOAP interface for all other accounts is disabled by default, but is always enabled for the SAM account. NOTE: For security reasons, HP recommends changing the Administrator account password after accessing Integrated Administrator for the first time. Because there is an eight-character limit to the password that is selectable, the password cannot be changed back to the default password via the command if you change it. Determining the IP Address Using the Local Console To determine the Integrated Administrator IP address using the local console perform the following steps: 1. Access the Integrated Administrator console: a. Connect a local client device (such as a laptop computer) with VT100 terminal emulation software to the Integrated Administrator (serial) console connector using a null modem serial cable. b. Open a terminal emulation session with the following settings: 9600 bps, 8 data bits, no parity, and 1 stop bit. c. Log into the Integrated Administrator using the password on the settings tag attached to the interconnect tray. 2. Establish the Integrated Administrator IP address. For a detailed explanation of the command line conventions used in this document, see Command Line Conventions on page 141. If a DHCP server is attached to the network, determine the Integrated Administrator IP address. Type the following command at the command line interface: SHOW NETWORK If a DHCP server is not attached to the network, type the following command to assign a static IP address to the Integrated Administrator: SET IPCONFIG STATIC <IP address> <subnet mask> {<gateway> {<DNS1 address> {<DNS2 address>}}} You can now access the Integrated Administrator using a Web browser, Secure Shell, Telnet, or SNMP. CAUTION: All settings are immediate and can only be manually restored. ENWW Determining the Integrated Administrator s Initial IP Address 11

22 Setting Up the Web-Based User Interface To set up the Web-based user interface, proceed as follows: 1. Type the Integrated Administrator IP address or DNS name in the address bar of the Web browser. A security alert displays as shown below. If you click Yes, the browser continues to the Login window of Integrated Administrator. The alert message appears each time you access the Integrated Administrator management processor in a browser. If you click No, you are returned to what was previously displayed on your browser. If you click View Certificate, a popup window displays the certificate information. Installing the certificate to your browser prevents the security alert message from displaying in the future. NOTE: To install your own certificate onto the Integrated Administrator rather than the automatically generated certificate, see the information on certificate-related commands in Administering Security Certificateson page 132. If the certificate is removed from your browser, the security alert message is displayed again. 2. Install the certificate to your browser: a. Click Install Certificate. The Certificate Manager Import Wizard starts. b. Click Next. c. Click Next for the browser to automatically select the certificate store when the Certificate Store window appears. d. Click Finish when the Completing the Certificate Manager Import Manager Wizard window displays. e. Click Yes to confirm the installation of the certificate when the confirmation window displays. 12 Chapter 3 Getting Started ENWW

23 3. The Account Login screen (shown below) prompts you for a user name and password. Use the default user name and password from the settings tag attached to the interconnect tray, and then click Log In. After the default user name and password have been verified, the summary window appears. The Integrated Administrator summary window provides general information about the Integrated Administrator, such as the user currently logged on, enclosure name and status, and Integrated Administrator IP address and name. ENWW Setting Up the Web-Based User Interface 13

24 Additional Steps HP recommends performing the following tasks: Change the Administrator account password Set the date and time Name the enclosure and rack Set up groups, users, and access privileges For detailed instructions on performing these tasks, see the appropriate sections in Setting Up the System on page Chapter 3 Getting Started ENWW

25 4 Web Browser Interface This chapter provides information for navigating the Integrated Administrator Web-based user interface: NOTE: Values appearing in the screens of this chapter are for illustrative purposes only. Accessing the Web-based User Interface Accessing the Web-based user interface is not supported from the console (serial) connector. To access the Integrated Administrator Web-based user interface with HTTP: 1. Get the DNS name from the settings tag attached to the interconnect tray. 2. Open a Web browser and type the IP address or DNS name for the enclosure to access. CAUTION: If your network does not provide DHCP and either Dynamic DNS or WINS services, you need to configure a static IP address. See Determining the IP Address Using the Local Consoleon page Type the user name and password at the Login prompt. ENWW Accessing the Web-based User Interface 15

26 Web-Based Navigation Top Panel The Web-based user interface displays information and receives input in the following areas: Top panel Left panel Deck panel The following illustration shows the location of the top panel. The top panel information is displayed at all times, including the following items: Enclosure name Current user Tabs The Integrated Administrator top panel provides real-time event notifications for an enclosure according to two categories: caution and critical. When an event occurs, the Integrated Administrator notifies the user by generating an icon that the user can click to view more details: Table 4-1 Event Notification Icons Icon Description Unknown Event Informational Minor Event Caution Warning Critical Two buttons appear on the top panel: Summary View Opens a separate window that shows enclosure status and configuration information for cutting and pasting purposes. Log Out Logs you out of the Web-based user interface. 16 Chapter 4 Web Browser Interface ENWW

27 Left Panel The following illustration shows the location of the left panel. Deck Panel The left panel displays which screens are available under each tab. Information appearing in the left panel depends on which tab the user chooses from within the top panel. The following illustration indicates the position of the deck panel. ENWW Web-Based Navigation 17

28 The deck panel displays the areas of information provided by the available screens under each tab. Information appearing in the deck panel depends on the option chosen by the user from within the top panel and the left panel. Enclosure Tab The Enclosure tab provides access to the following screens: Enclosure Information Network Configuration SNMP Configuration Power Readings Virtual Buttons System Log System Log Policy Enclosure Power Management 18 Chapter 4 Web Browser Interface ENWW

29 Enclosure Information All users have read access to the information in this screen: Status Temperature Power General Integrated Administrator Network Date and Time The following illustration shows the information presented on the Enclosure Information screen (status area). ENWW Enclosure Tab 19

30 The Enclosure Information screen enables an enclosure administrator account with administrator privileges to update/observe the global configuration for the enclosure, such as the rack name, enclosure name, asset tag, time zone, date, time, status and general information. Two buttons appear on the Enclosure Information screen: Apply Saves changes made to the screen. Cancel Restores all fields on the screen to their original values. The following table describes the information displayed in the areas that comprise the Enclosure Information screen. Table 4-2 Enclosure Information Field Descriptions Status Area Field Possible Values Description Enclosure Name Rack Name Maximum 32 characters including all alphanumeric, dash, and underscore characters. Maximum 32 characters including all alphanumeric, dash, and underscore characters. Name of enclosure. Only enclosure administrators have write access to this field. For the default enclosure name, see Factory Default Settings on page 162. Name of rack. Only enclosure administrators have write access to this field. For the default rack name, see Factory Default Settings on page 162. Enclosure Status OK, Degraded, or Failed. Status of the enclosure. Fan Status Redundant or non-redundant. Redundant: all fans are functional. Nonredundant: at least one fan is not functional. Fan #1 Fan #4 Fan Cage fans Fan Spare Number Fan #5 Fan #6 Power Supply fans NOTE: HP BladeSystem PC Blade Enclosure G2 enclosures only Power Supply Fan Spare Number OK, Standby, Degraded, Failed, or Testing. Percentage of full fan speed. OK, Standby, Degraded, Failed, or Testing. Percentage of full fan speed. Status of fans 1 through 4. The spare number for the fans installed in the enclosure. Status of power supply fans 5 and 6. The spare number for the fans installed in the power supplies. 20 Chapter 4 Web Browser Interface ENWW

31 Figure 4-1 Enclosure Information-Temperature Area Table 4-3 Enclosure Information Field Descriptions Temperature Area Field Possible Values Description Chassis Temperature OK, Warm, Caution, or Critical. Enclosure component temperature sensor. Fan Exhaust Temperature OK, Warm, Caution, or Critical. Enclosure component temperature sensor. Blade Bays Temperature OK, Warm, Caution, or Critical. Enclosure component temperature sensor. Interconnect Tray Temperature OK, Warm, Caution, or Critical. Enclosure component temperature sensor. Power Supply Bay 1 Internal Temperature Power Supply Bay 2 Internal Temperature OK, Warm, Caution, or Critical. OK, Warm, Caution, or Critical. Enclosure component temperature sensor. Enclosure component temperature sensor. Power Supply Bay 1 Inlet Temperature OK, Warm, Caution, or Critical. Enclosure component temperature sensor. Power Supply Bay 2 Inlet Temperature OK, Warm, Caution, or Critical. Enclosure component temperature sensor. NOTE: Power supply sensors are only supported by the HP BladeSystem PC Blade Enclosure G2. ENWW Enclosure Tab 21

32 Figure 4-2 Enclosure Information-Power Area Table 4-4 Enclosure Information Field Descriptions Power Area Field Possible Values Description Power Subsystem Status Redundant, Resilient, Resilient (throttling), Non-redundant, Nonredundant (throttling). Redundant: both power supplies are functional. Resilient: blades may throttle performance due to power supply failure/ loss. Resilient (throttling): all blades preemptively throttled to prevent enclosure or blade shutdown due to power supply loss; total blade population has exceeded the resilient power capacity. Non-redundant: one power supply is not functional or allocated capacity has exceeded resilient capacity. Non-redundant (throttling): Loss of a power supply has occurred; all blades are now throttled to ensure they meet the budgeted power capacity for a single supply; total blade population has exceeded the redundant power capacity. Total Capacity Watts. Total capacity of the power supplies. 22 Chapter 4 Web Browser Interface ENWW

33 Table 4-4 Enclosure Information Field Descriptions Power Area (continued) Field Possible Values Description Power Supply #1 and #2 Status OK, Degraded, or Failed. Status of power supply #1 and power supply #2. AC Input #1 and #2 Status OK, Degraded, or Failed. Status of AC input to power supply #1 and AC input to power supply #2. Power Supply #1 and #2 Current Input Range Low, Medium or High The current input voltage range for power supplies #1 and #2. NOTE: For G2 enclosure only Power Supply Spare Number The spare number for the power supplies installed in the enclosure. Figure 4-3 Enclosure Information Table 4-5 Enclosure Information Field Descriptions General Area Field Possible Values Description Enclosure Type Enclosure product type. Part Number Part number for the enclosure. Serial Number Serial number for the enclosure. Asset Tag Maximum 31 characters including all alphanumeric, dash, and underscore characters Asset tag Only enclosure administrators have write access to this field. For the default asset tag value, see Factory Default Settings on page 162. ENWW Enclosure Tab 23

34 Table 4-5 Enclosure Information Field Descriptions General Area (continued) Field Possible Values Description Interconnect Tray Type HP PC Blade Enclosure Interconnect Switch HP PC Blade Enclosure RJ-45 Interconnect Patch Panel Type of interconnect tray. Interconnect Tray Part Number Part number for the interconnect tray. Interconnect Tray Spare Number Spare number for the interconnect tray. Interconnect Tray Serial Number Serial number for the interconnect tray. Blade Auto Power On Feature Enabled or Disabled If enabled, the enclosure IA will automatically power on blades when inserted or when AC cycle is applied to the enclosure. When disabled, blades will not automatically power on when inserted. Enabled by default. Auto Power On Delay 1 to 60 minutes The feature delays the automatic poweron and/or allowance of powering on blades by a programmable amount of time after an enclosure is powered on. Default is 4 minutes. This is global setting which affects the initial auto power on of all blades. Table 4-6 Enclosure Information Field Descriptions Integrated Administrator Area Field Possible Values Description Hardware Version Hardware version of the Integrated Administrator of the enclosure. Software Version Software version of the Integrated Administrator of the enclosure. Additionally, build version is displayed. Table 4-7 Enclosure Information Field Descriptions Network Area Field Possible Values Description IP Address ###.###.###.###, where ### ranges from 0 to 255. The IP address of the Integrated Administrator. DHCP Enabled or Disabled. Shows the status of the Dynamic DNS This field appears only if DHCP is enabled. MAC Address ##:##:##:##:##:## where ## ranges from 00 to FF. The MAC address of the Integrated Administrator. 24 Chapter 4 Web Browser Interface ENWW

35 Figure 4-4 Enclosure Information (continued) Table 4-8 Enclosure Information Field Descriptions Date and Time Area Field Possible Values Description Time Zone Drop-down box with standard time zones listed Time zone assigned to the enclosure For the default time zone, see Factory Default Settings on page 162. For a list of all supported time zones, see Time Zone Settings on page 165. For a detailed description of how to set the time zone of the enclosure to a value not listed in the drop down box, select Other. For additional information, see Troubleshooting on page 155. Date mm/dd/yy The date assigned to the enclosure Time hh:mm (24-hour format) The time assigned to the enclosure Only enclosure administrators have access to the Date and Time information. If those fields are not being modified, the Integrated Administrator updates these fields every 20 seconds. If automatic time configuration is enabled, the date and time fields are grayed out and cannot be modified. If you select Other for time zone, use the following window to set a user-defined time zone: ENWW Enclosure Tab 25

36 Three buttons appear on this window: Apply Applies the new time zone. Reset Clears the time zone text box. Cancel Cancels all changes and closes the window. For more information on accepted time zones, refer to Time Zone Settings on page 165. Network Configuration NOTE: Only enclosure administrators have access to these settings. The Network Configuration screen (shown below) enables the enclosure administrator to modify the network settings of an enclosure. These settings are specific to the enclosure and do not affect the network configurations for blade PCs. 26 Chapter 4 Web Browser Interface ENWW

37 Two buttons appear at the bottom of this screen: Apply Saves changes made to the screen. Cancel Restores all fields on the screen to their original values. CAUTION: Both the Web and Secure Shell protocols must be enabled to allow access to the Webbased user interface. The following table describes the information displayed in the areas that comprise the Network Configuration screen. Table 4-9 Network Configuration Field Descriptions Information Area Field Possible Values Description IP Address The IP address of the Integrated Administrator. MAC Address The MAC address of the Integrated Administrator. Table 4-10 Network Configuration Field Descriptions Protocols Area Field Possible Values Description Web (HTTP/HTTPS) Enabled or Disabled. The default setting is Enabled. SNMP Enabled or Disabled. The default setting is Enabled. ENWW Enclosure Tab 27

38 Table 4-10 Network Configuration Field Descriptions Protocols Area (continued) Field Possible Values Description Secure Shell Enabled or Disabled. The default setting is Enabled. Telnet Enabled or Disabled. The default setting is Enabled. SOAP Enabled or Disabled. The default setting is Disabled. Table 4-11 Network Configuration Field Descriptions Network Area Field Possible Values Description DHCP Gets the IP address of the Integrated Administrator from the DHCP. Static IP Sets a static IP address of the Integrated Administrator. Dynamic DNS Determines whether the Integrated Administrator uses Dynamic DNS. IP Address Subnet Mask Gateway Address DNS Server 1 DNS Server 2 ###.###.###.###, where ### ranges from 0 to 255. ###.###.###.###, where ### ranges from 0 to 255. ###.###.###.###, where ### ranges from 0 to 255. ###.###.###.###, where ### ranges from 0 to 255. ###.###.###.###, where ### ranges from 0 to 255. Static IP address for the Integrated Administrator (mandatory if Static IP is selected). Subnet mask for the Integrated Administrator (mandatory if Static IP is selected). Gateway address for the Integrated Administrator (optional field if Static IP is selected). The IP address for the primary DNS server (optional field if Static IP is selected). The IP address for the secondary DNS server (optional field if Static IP is selected). 28 Chapter 4 Web Browser Interface ENWW

39 Table 4-12 Network Configuration Field Descriptions Alertmail Configuration Area Field Possible Values Description Alertmail Enabled or Disabled. The default setting is Disabled. Address Sender Domain SMTP Server Maximum 32 characters including all alphanumeric, dash, and underscore characters. Maximum 32 characters including all alphanumeric, dash, and underscore characters. ###.###.###.###, where ### ranges from 0 to 255. The address of the sender. The domain of the sender. The IP address for the SMTP server. NOTE: Alertmail cannot be enabled: if an invalid SMTP server or address is provided if NTP is enabled but the primary server is invalid Table 4-13 Network Configuration Field Descriptions NTP Configuration Area Field Possible Values Description NTP Enabled or Disabled. The default setting is Disabled. Primary Server ###.###.###.###, where ### ranges from 0 to 255. The IP address for the primary NTP server. ENWW Enclosure Tab 29

40 Table 4-13 Network Configuration Field Descriptions NTP Configuration Area (continued) Field Possible Values Description Secondary Server Poll Interval ###.###.###.###, where ### ranges from 0 to 255. ###, where ### ranges between 60 and 9999 seconds. The IP address for the secondary NTP server. Interval of time between collecting NTP data from the server. SNMP Configuration The SNMP Configuration screen (shown below) enables an enclosure administrator to modify the SNMP settings of an enclosure. These settings are specific to the enclosure and do not affect the network configurations for blade PCs. Two buttons appear at the bottom of this screen: Apply Saves changes made to the screen. Cancel Restores all fields on the screen to their original values. The following table describes the information presented on the SNMP Configuration screen: Table 4-14 SNMP Configuration Field Descriptions System Information Area Field Possible Values Description SNMP Status Enabled or Disabled Displays if SNMP is enabled or disabled. 30 Chapter 4 Web Browser Interface ENWW

41 Table 4-14 SNMP Configuration Field Descriptions System Information Area (continued) Field Possible Values Description System Name The name of the enclosure. System Location System Contact Up to 20 characters including all alphanumeric, dash, and space characters Up to 20 characters including all alphanumeric, dash, underscore, and space characters The SNMP location of the enclosure For the default SNMP contact, see Factory Default Settings on page 162. The SNMP contact of the enclosure For the default SNMP contact, see Factory Default Settings on page 162. Table 4-15 SNMP Configuration Field Descriptions Community Strings and Trap Destinations Area Field Possible Values Description Read Community Write Community Up to 20 characters including all alphanumeric, dash, underscore, and space characters Up to 20 characters including all alphanumeric, dash, underscore, and space characters Displays the SNMP read community string If this is left blank, public is assigned. For the default read Community string, see Factory Default Settings on page 162. Sets the SNMP write community string If this is left blank, SNMP SET commands are disabled. For the default write Community string, see Factory Default Settings on page 162. Add Adds an IP address to the list of trap destinations. Remove Removes the selected IP addresses from the list of trap destinations. ENWW Enclosure Tab 31

42 Power Readings The Power Readings screen provides power consumption estimates for the enclosure. This screen includes the following fields: NOTE: Power readings are shown only if the enclosure has a non-power-aware blade present. This is a feature of HP BladeSystem bc2x00 Blade PCs only. The screen may differ from the image shown here. Enclosure Average Supply Input Power The immediate average power consumption averaged over the last 5 second sample interval. Enclosure Average Supply Input Power 24-Hour Sample Intervals This is a rolling average of power consumption over the course of preceding last 24 hours of uptime. Enclosure Peak Supply Input Power 24-Hour Sample Intervals This is the peak of power consumption over the course of the preceding 24 hours of uptime. Enclosure Average Supply Input Power Time Averaged Since Powered This is the power consumption averaged over the total uptime for the IA. This is since the previous power cycle or IA reset. Enclosure Peak Supply Input Power Time Averaged Since Powered This is the peak of power consumption over the total uptime for the IA. This is since the previous power cycle or IA reset. NOTE: All statistics are calculated from the time of the last reboot, up to 24-Hours. 32 Chapter 4 Web Browser Interface ENWW

43 Virtual Buttons NOTE: Only enclosure administrators can execute these commands. The Virtual Buttons screen (shown below) enables an enclosure administrator to modify the power state of the enclosure and Unit Identification LED from a remote location to facilitate troubleshooting by technicians in the data center. The Toggle On/Toggle Off button remotely changes the state of the enclosure Unit Identification LED. The illustration below shows the information presented in the Enclosure Power area of the Virtual Buttons screen: You can select the appropriate function with the following buttons: Restart Integrated Administrator Restarts the Integrated Administrator and does not affect the blade PCs. Power Off Enclosure Attempts a graceful shutdown of the system for 5 minutes, after which time this command powers down all components of the enclosure immediately. CAUTION: HP recommends that you use the operating system shutdown procedures before powering down a blade PC or enclosure. After the enclosure is powered off, powering on can only occur by local access to the system. ENWW Enclosure Tab 33

44 System Log The System Log screen (shown below) provides an enclosure administrator with a chronological list of events and updates associated with the enclosure. Two buttons appear at the bottom of this screen: Refresh Refreshes the screen. Clear Clears the system log. System Log Policy The System Log Policy screen (shown below) provides an enclosure administrator account with administrator privileges with display and control over the logging of some system logged event messages. 34 Chapter 4 Web Browser Interface ENWW

45 There are two radio buttons for each event severity classification corresponding to enclosure and bay system log policies: Critical ON / OFF NOTE: Enclosure and bay critical syslog messages cannot be masked. Major ON / OFF Minor ON / OFF Normal ON / OFF Informational ON / OFF The Informational default is OFF; all other enclosure and bay system log policies are defaulted to ON. For details concerning specific system log messages, see Error Messages on page 142 for supported system log messages and severity classification. ENWW Enclosure Tab 35

46 Enclosure Power Management Tab This tab will show power subsystem information as it pertains to power management. The status and capacity values are Table 4-16 Power management values Displayed Information Description Allowable values Power Subsystem Status Current power subsystem state Redundant, Resilient, Resilient (throttling), Non-Redundant, and Non- Redundant (throttling) Total Capacity Redundant Capacity In watts; sum of each power supply s steady state redundant capacity This value is the maximum rated power supply capacity of the lowest rated power supply in the enclosure. Thus, this definition allows for possible heterogeneity of power supplies. PC Blade Enclosure = =1600W PC Blade Enclosure 1200W PC Blade Enclosure = = = 800W PC Blade Enclosure 600W 36 Chapter 4 Web Browser Interface ENWW

47 Table 4-16 Power management values (continued) Displayed Information Description Allowable values Resilient Capacity Allocated Capacity Available Capacity This value is the maximum oversubscription over the redundant power value limit of any one power supply. This represents the maximum safe oversubscription value for the enclosure power budget to ensure operation of all devices within the enclosure. Calculated maximum possible power budget based on the current configuration of blades and enclosure. This number is used to by the IA to determine the possible actions, if any, for changing the power configuration of the enclosure. Redundant Capacity - Allocated Capacity PC Blade Enclosure = = = 960W PC Blade Enclosure 827W Variable value in watts. Variable value in watts. Bays Tab Bay List For more information, see Power Management and Redundant Power Supply on page 160. The Bays tab provides access to the following screens: Bay List Bay Information Remote Console Virtual Buttons Console Log Bay Power Consumption Bay Temperature The Bay List screen (shown below) enables an enclosure administrator to observe and update the assignment of groups to blade PC bays, as well as monitor the status of each blade PC installed in the enclosure. ENWW Bays Tab 37

48 Group administrators and group members with permissions can view the blade PC bays assigned to their groups. A group administrator account is an account set up by the Administrator user account to have administrative privileges to administer only the bays that have been assigned to it. A group administrator does not have enclosure administration rights but bay-only administration rights. The following table describes the information presented in the Bay List screen: Table 4-17 Bay List Field Descriptions Field Possible Values Description Bay # 1-20 Blade PC number. UID Displays a blue circle if the unit identification (UID) LED of the blade is lit. Blade PC Name Name of the blade PC in that blade PC bay as defined by the operating system of the blade PC. NOTE: The blade PC health service must be installed for the Integrated Administrator to obtain the blade PC name and operating system type. Assigned to Group Name of the group that owns that bay. Status OK, Degraded, or Failed The status and power state of the blade PC. The following table lists permissions that are related to the action buttons of the Bay List screen 38 Chapter 4 Web Browser Interface ENWW

49 Table 4-18 Bay List Action Buttons and Permissions Field Possible Values Description View/Modify Opens the Blade Information screen. Enclosure administrators, group administrators, and group members with permissions. Remote Console Opens the Remote Console screen. Enclosure administrators, and group administrators with permissions. Console Log Opens the Console Log screen. Enclosure administrators, group administrators, and group members with permissions. View Group Opens the View/Modify Group screen. Enclosure administrators only. Bay Assignment Opens the Bay Assignment dialog box. NOTE: If a blade PC is to be reassigned, it must be unassigned first. Enclosure administrators only. Bay Power Consumption The Bay Power Consumption screen (shown below) enables an enclosure administrator to observe the power consumption of all populated bays within the enclosure. ENWW Bays Tab 39

50 The table reports the following information: Bay # Bay Type This is necessary to know this since only bc2x00 blades are power-aware and report power to the IA. WDC This is direct current (DC) power consumption in Watts of the blade averaged over the last 1 second sampling interval. WDC (24hr Avg.) This is direct current (DC) power consumption in Watts of the blade averaged over the last 24 hours of operation within the enclosure. WDC (Overall Avg.) This is direct current (DC) power consumption in Watts of the blade averaged over the last 24 hours of operation within the enclosure. NOTE: Power reporting is a feature limited to bc2x00 series of blades. All others will not report a value in the any of wattage columns. Unknown indicates that a blade has not completed the initial post transfer. All statistics are calculated from the time of the last reboot, up to 24-Hours. Bay Temperature The Bay Temperature screen enables an administrator to check the ambient temperature for a blade PC in a given blade PC bay. Group administrators and group members with View rights to the blade PC bay can also observe this information. 40 Chapter 4 Web Browser Interface ENWW

51 Table 4-19 Bay Temperature Field Descriptions Field Possible Values Description Bay # Bay Type CPU C/F Graphics C/F Ambient C/F Bay number. Bay type. Temperature of the CPU in degrees Centigrade or Fahrenheit. Temperature of the blade graphics controller in degrees Centigrade or Fahrenheit. Ambient temperature of the Bay in degrees Centigrade or Fahrenheit. Bay Information NOTE: Be sure the Integrated Administrator displays up-to-date blade PC information by rebooting the blade PC after installing the blade PC health service. The blade PC may need to be rebooted a second time to fully update the Integrated Administrator. The Bay Information screen (shown below) enables an enclosure administrator to observe the status and general information for a blade PC in a given blade PC bay. Group administrators and group members with View rights to the blade PC bay can also observe this information. ENWW Bays Tab 41

52 NOTE: bc2x00 blades with BIOS 3.x provide additional informational fields. To be sure that the Bay Information screen displays the optimal number of possible values, you must have the blade PC health driver installed. The following table describes the information presented on the Bay Information screen for all enclosure administrators and for group members and groups with rights to the blade PC bay. Table 4-20 Bay Information Field Descriptions Status Area Field Possible Values Description Status Area Bay Number Bay number. Blade PC Name Name of blade PC as specified with the blade PC operating system. Status OK, Degraded, or Failed Status of the blade PC. NOTE: In the case of a failed or degraded bc2x00 blade, an additional diagnostic message is posted in parentheses. 42 Chapter 4 Web Browser Interface ENWW

53 Table 4-20 Bay Information Field Descriptions Status Area (continued) Field Possible Values Description Thermal Condition OK, Warm, Caution, or Critical Thermal condition of the blade. Enclosure Name Name of enclosure. Rack Name Name of rack NOTE: In the case of a thermal critical or caution condition, bc2x00 blades provide thermal measurements for the CPU, Graphics processor, and ambient sensors in degrees Celsius at the time of failure detection. For the default enclosure name, see Factory Default Settings on page 162. POST Status Started, Completed, Off The blade power on self test POST status. Displayed for bc2x00 blades with BIOS 3 series only. Diagnostic Adaptor Status Present, Absent, and N/A (Off) Indicates whether the blade diagnostic adaptor has been inserted into the blade front IO connector. This status indicator is only valid when the blade power is on. Displayed for bc2x00 blades with BIOS 3 series only. Automated System Recovery (ASR) Mode Status Network (PXE) Booting Status Enabled, Disabled, and N/A (off) In Progress, Not In Progress, and N/A (Off) Indicates whether the Automated System Recovery Mode (ASR) is enabled or disabled. The status is only valid when the blade is powered on. Displayed for bc2x00 blades with BIOS 3 series only. Indicates whether the blade is currently in network Pre-boot-execution (PXE) mode. This is only valid when the blade is powered on. Displayed for bc2x00 blades with BIOS 3 series only. Front IO Blanking Feature Status Enabled, Disabled, and N/A (Off) This status indicates whether the blade has it's front IO disabled to allow for session privacy when a user is using that blade. This is only valid when the blade is powered on. Displayed for bc2x00 blades with BIOS 3 series only. Table 4-21 Bay Information Field Descriptions General Area Field Possible Values Description General Area Blade PC Type Product name of the blade PC. Blade PC Installed OS Operating system installed on the blade PC. Spare Number Spare number of the blade PC. Serial Number Serial number of the blade PC. Asset Tag Asset tag number of the blade PC. ENWW Bays Tab 43

54 Table 4-21 Bay Information Field Descriptions General Area (continued) Field Possible Values Description BIOS Version mm/dd/yy ROM version on the blade PC. CPU # Type Type of processor on the blade PC. CPU # Max Speed Speed associated with the blade PC processor. Installed RAM Amount of memory installed on the blade PC. NIC #1 and #2 MAC Addresses ##:##:##:##:##:##, where ## ranges from 00 to FF. MAC address of the NIC 1 interface and the NIC 2 interface. BMC Revision 00 to FF BMC Revision: For bc2x00 blades, the Blade Management Controller (BMC) revision will be posted here. The BMC versions prior to version 23 do not report this value. N/A will be shown in parentheses. Future versions of the BMC will provide this information. Universal Unique Identifier (UUID) Universal Unique Identifier (UUID). Displayed for bc2x00 blades with BIOS 3 series only. Pending Boot Order Changes {HDD, PXE, PXE} ={First, Once, Always} Shows the boot device to be used on the next boot of the bay(s) specified. This setting is only valid on present blades and is cleared if the blade is removed. Remote Console Enclosure administrators and group administrators with access to the bay can click Remote Console to open a remote text-based console (shown below) to the blade PC in the bay. NOTE: Click on the command window to assure it has focus, otherwise no commands can be entered. 44 Chapter 4 Web Browser Interface ENWW

55 For information on establishing remote console connectivity, see Enabling Remote Console Sessions to Blade PCs on page 101. Virtual Buttons Enclosure administrators and group administrators with permissions can use the Virtual Buttons screen (shown below) to modify the state of the power state and Unit Identification LED of a blade PC in order to facilitate troubleshooting from a remote location. ENWW Bays Tab 45

56 The Virtual Buttons screen enables group administrators and enclosure administrators to reboot, power off, or identify the blade PC with the following items: The Toggle On/Off button remotely changes the state of the blade PC Unit Identification LED. You can select the appropriate function in the Blade PC Power area using the following radio buttons: Reboot reboots the blade PC. Power Off attempts a graceful shutdown of the blade PC for 5 minutes, after which time this command powers down the blade PC immediately. This is the equivalent to a less than 3- second power button press on a standard desktop PC. Power Off Immediately powers off the blade PC forcefully. This is the equivalent to a 5- second power button press on a standard desktop PC. CAUTION: Without service, an ACPI-compliant operating system, the Integrated Administrator cannot gracefully shut down a blade PC. This condition can result in the permanent loss of data. NOTE: Click Apply for these settings to take effect. Whenever possible, HP recommends that you use the operating system shutdown procedures before powering down a blade PC or enclosure. Once the enclosure is powered off, powering on can only occur with local access to the system. 46 Chapter 4 Web Browser Interface ENWW

57 Console Log NOTE: Only group members, group administrators, and enclosure administrators can view a console log of a blade PC. The Console Log screen displays the console log for the specified bay. The console log of the bay is not stored between reboots of the Integrated Administrator, so the information will only include what has taken place since the last power on of the Integrated Administrator. The data captured in the console log is all output from the serial console of the blade PC that occurred while no one was connected to the console. For security reasons, console output during a user connection session is not logged. The Refresh button refreshes the console log for the current blade PC. Administration Tab User List For an explanation of user rights associated with the Integrated Administrator, see Enabling Remote Console Sessions to Blade PCs on page 101. The Administration tab provides access to the following screens: User List Group List Add User Add Group View/Modify User View/Modify Group Update IA FW Config Scripts The User List screen (shown below) enables an appropriate group administrator or enclosure administrator to observe and update user access to groups and blade PC bays. ENWW Administration Tab 47

58 The following table lists the permissions related to the action buttons of the User List screen. Table 4-22 User List Action Buttons and Permissions Button Function Permissions View/Modify User Opens the View/Modify User screen. Enclosure administrators can access and modify the information for any user. Users can access and modify the information for own account. Remove User Removes the selected user (unless the account is your own). Only enclosure administrators can execute this command. The following table describes the information presented in the User List screen. Table 4-23 User List Field Descriptions Button Function Permissions User Name User login name. Full Name User full name. Account Type Administrator or User Shows if the user is an enclosure administrator. Account Status Enabled or Disabled Shows if the user s account is enabled. Group Membership Shows the groups in which the user has membership. Group List The Group List screen (shown below) enables an enclosure administrator to observe and update the assignment of groups and users to blade PC bays. 48 Chapter 4 Web Browser Interface ENWW

59 Two buttons appear on this screen: View/Modify Group Opens the View/Modify Group screen. Remove Group Removes the selected group. NOTE: Enclosure administrators can view and modify the information for all groups. Group administrators and group members can view the information for the groups in which they are members. Table 4-24 Group List Field Descriptions Field Group Name Assigned Bays Group Members Description Group name Blade PC bays that the group owns Users with membership in the group Add User NOTE: Only enclosure administrators have access to this area of the Integrated Administrator. The Add User screen (shown below) enables an enclosure administrator to create a user profile, including group and blade PC bays assignments. ENWW Administration Tab 49

60 Two buttons appear on this screen: Apply Saves changes made to this screen. Cancel Restores all fields on this screen to their original values. The following table describes the fields of the Add User screen. Table 4-25 Add User Field Descriptions Field Possible Values Description User Name Password Confirm Password 1-13 characters including alphanumeric, dash, and underscore characters. The user name must begin with a letter. A maximum of 25 users can be created in addition to the reserve accounts. 3-8 characters including all printable characters 3-8 characters including all printable characters Login name of the user. NOTE: Administrator, switch, switcha, switchb, SAM, and all are reserved names and cannot be used. This restriction is not case-sensitive. User s password. User s password. Account Type Radio buttons (Administrator and User) Determines if the user has enclosure administrator rights. Account Status Radio buttons (Enabled and Disabled) Determines if the user s account is enabled. Full Name (optional) 1-20 characters Accepts only alphanumeric, dash, underscore, and space characters Full name of user. 50 Chapter 4 Web Browser Interface ENWW

61 Table 4-25 Add User Field Descriptions (continued) Field Possible Values Description Contact Information (optional) 1-20 characters Accepts only alphanumeric, dash, underscore, and space characters Optional user contact information. Group Names All groups are listed A list of all possible groups. Group Membership x number of groups (all groups in which the user has membership) A list of all groups of which the user is a member. Add User [View]>>> Adds the user to the selected groups in the Group Names text box with View rights for group members These groups appear in the Group Membership text box. The user loses View/Modify rights if they previously had them. Add User [View/Modify]>>> Adds the user to the selected groups in the Group Names text box with View/ Modify rights for group administrators or view rights for group members. <<< Removes the user from the selected groups in the Group Membership text box. Add Group NOTE: Only enclosure administrators have access to this area of the Integrated Administrator. The Add Group screen (shown below) enables an enclosure administrator to create a group profile, including user and blade PC bays assignments. ENWW Administration Tab 51

62 NOTE: Grayed-out check boxes are unavailable because they are already assigned to another group. Two buttons appear on this screen: Apply Saves changes made to this screen. Cancel Restores all fields on this screen to their original values. Table 4-26 Add Group Field Descriptions Group Information Area Field Possible Values Description Group Information Area Group Name Group Description (optional) 1-13 characters including alphanumeric, dash, and underscore characters. The group name must begin with a letter. A maximum of 20 users can be created characters Accepts only alphanumeric, dash, and underscore characters. Name of group. Description of group. Table 4-27 Add Group Field Descriptions Bay Assignment Area Field Possible Values Description Bay Assignment Area 52 Chapter 4 Web Browser Interface ENWW

63 Table 4-27 Add Group Field Descriptions Bay Assignment Area (continued) Field Possible Values Description Bay 1 - Bay 20 Determines which bays the group owns. Only one group can own a particular bay. If a check box is disabled, another group already owns the bay. Select All Selects all check boxes of the bays. Clear All Clears all check boxes of the bays. Table 4-28 Add Group Field Descriptions Group Membership Area Field Possible Values Description Group Membership Area User Names Group Members All users and enclosure administrators are listed. x number of users (all users that are members of the group). A list of all possible users. A list of all users that are members of the group. Add User [View]>>> Adds selected users in the User Names text box to the group with View rights for group members. Users lose View/Modify rights for group administrators if they previously had them. Add User [View/Modify]>>> Adds selected users in the User Names text box to the group with View/Modify rights for group administrators. <<<Remove User Removes selected users in the Group Members text box from the group. View/Modify User You can access the View/Modify User screen by clicking any row in the User List and then clicking View/ Modify User. The View/Modify User screen provides the same functions and has the same access as the Add User screen. See the Add User section in this chapter. View/Modify Group You can access the View/Modify Group screen by clicking any row in the Group List and then clicking View/Modify Group. The View/Modify Group screen the provides same functions and has the same access as the Add Group screen. See Add Group on page 51 in this chapter. Update IA Firmware The Update IA Firmware screen provides the firmware information. ENWW Administration Tab 53

64 Table 4-29 Update IA Firmware Field Descriptions Field Possible Values Description Current Firmware Status Area Firmware Version Firmware version. Update Firmware New Firmware Location URL The URL of the new firmware. NOTE: The IIS manager may need to be updated to handle specific file extension MIME types (i.e.,.rom) as an "application/octet-stream." Configuration Scripts The Configuration Scripts screen displays the URLs from which and to which configuration scripts are loaded. 54 Chapter 4 Web Browser Interface ENWW

65 Table 4-30 Configuration Scripts Field Descriptions Field Possible Values Description Download Config Script URL to download the configuration script from URL to download the configuration script from Upload Config Script URL to upload the configuration script to URL to upload the configuration script to ENWW Administration Tab 55

66 Event List Tab The Event List tab provides access to the following screens: Event List Event Log Policy The Event List differs from the System Log in the following ways: Any user can view the Event List. Only enclosure administrators can access the System Log. The messages in the Event List are limited to cautions and critical failures. Refer to the enclosure System Log for information on both failures and fixes. Minor, informational, and normal events are also reported and are displayed based on event log policy settings. Informational and normal events are disabled by default. The Event List only displays messages received since the user logged into the Integrated Administrator. The System Log displays every message generated by the enclosure diagnostics. A maximum of 50 event log messages is displayed. Older messages are dropped from the queue as that threshold is crossed. The Event List screen (shown below) provides the following information for each event: Severity Source Date Time Event Details (the example below indicates a heatsink not properly atttached) 56 Chapter 4 Web Browser Interface ENWW

67 This example above shows a bay in a degraded state. You can click on the event to display the bay list that contains additional details concerning the fault. ENWW Event List Tab 57

68 The Integrated Administrator provides real-time event notifications for an enclosure according to four categories of severity (normal, minor, caution, and critical) described in the following table. For detailed information regarding the Event List, including a comprehensive list of event messages, see Event Icons and Details on page 157. Table 4-31 Event Notification Icons Icon Description Informational A message that is for information purposes. Information messages have no impact on continued operability. Normal An event that is a usual occurrence in the operation of the enclosure. When a normal event occurs, there is a reasonable expectation of continued operability. Caution Minor An event that does not prevent the enclosure from operating, maintaining power, or serving its user community When a minor event occurs, a reasonable guarantee that operability can persist exists. Caution Major An event that does not prevent the enclosure from operating, maintaining power, or serving its user community When a caution event occurs, a reasonable guarantee that operability can persist no longer exists. Critical An event that prevents the continued operation of the enclosure. When a critical event occurs, the inoperability of the enclosure is imminent. 58 Chapter 4 Web Browser Interface ENWW

69 Event Log Policy Critical ON / OFF Caution Major ON / OFF Caution Minor ON / OFF Normal ON / OFF Informational ON / OFF The default is ON for all Enclosure event log policies. The default is ON for all Bay event log policies except Normal and Informational. For details concerning specific event log messages, see Error Messages on page 142 for supported event log messages and severity classification. Interconnect Tab The Interconnect Tray screen (shown below) allows anyone to view information about the interconnect tray. It allows enclosure administrators to connect to the remote console of one of the interconnect switches if installed. ENWW Interconnect Tab 59

70 The following table describes the information displayed in the areas that comprise the Interconnect Tray screen. Table 4-32 Interconnect Tray Screen Field Descriptions Interconnect Tray Information Area Field Possible Values Description Interconnect Tray Information Area Status OK, Degraded, or Failed Status of the interconnect tray. Temperature OK, Warm, Caution, or Critical Thermal status of the interconnect tray. Switch A Status OK, Degraded, or Failed Status of Switch A. This will only be displayed if an interconnect switch is installed. Switch B Status* OK, Degraded, or Failed Status of Switch B. This will only be displayed if an interconnect switch is installed. Manufacturer Manufacturer of the interconnect tray. Product Name Product name of the interconnect tray. Interconnect Tray Part Number Spare part number of the interconnect tray. Interconnect Tray Serial Number Serial number of the interconnect tray. * Proliant C-GbE e-class switch only. 60 Chapter 4 Web Browser Interface ENWW

71 Table 4-33 Interconnect Tray Screen Field Switch Terminal Console Area (only present if an interconnect switch is installed) Field Possible Values Description Switch Terminal Console Area (only present if an interconnect switch is installed) Switch A button Opens a new window to the remote console of switch A. Switch B button* Opens a new window to the remote console of switch B. * Proliant C-GbE e-class switch only. ENWW Interconnect Tab 61

72 5 Command Line Interface This chapter provides reference material for operating the Integrated Administrator Command Line Interface (CLI). This chapter provides command line related information with the following sections: Accessing the Command Line Interface Operating the Command Line Interface General commands General management commands User account commands Enclosure network configuration commands Enclosure management commands Blade PC management commands Functionality exclusive to the command line interface For a detailed explanation of the command line conventions used in this document, see Command Line Conventions on page 141. For easy reference, the index of this book also provides a comprehensive listing of the commands supported by the Integrated Administrator. 62 Chapter 5 Command Line Interface ENWW

73 Accessing the Command Line Interface You can access the CLI remotely through the management (10/100 Ethernet) connector, locally through the console (serial) connector on the rear panel of the enclosure, or through any uplink depending on VLAN configuration. Accessing Remotely through the Management Connector To access the Integrated Administrator command line interface remotely through the management (10/100 Ethernet) connector: 1. Get the default host name from the settings tag attached to the interconnect tray. 2. Open a Telnet or Secure Shell application and type the IP address or DNS name for the enclosure you wish to access. CAUTION: Using Telnet instead of Secure Shell means your remote session, including password, appears in clear text on that network. 3. Type the user name and password into the Login prompt. Accessing Locally through the Console Connector To access the Integrated Administrator locally through the serial connector: 1. Connect a local client device, such as a laptop computer, to the serial connector using a null-modem cable. NOTE: Client devices must satisfy the requirements provided in Requirements for Local Client Deviceson page Open the terminal emulator and press Enter one or more times to get the login prompt. 3. Type the user name and password. ENWW Accessing the Command Line Interface 63

74 Operating the Command Line Interface General Commands The following table describes the information displayed in the areas that comprise the Enclosure Information screen. Table 5-1 General Commands Command Description Restrictions CLEAR SCREEN Clears the terminal screen None EXIT Exits the command line interpreter None HELP {<command>} Tree If a command is given, the usage and help text for the command are shown in a tree format. If no argument is given, all base commands are displayed. None LOGOUT Exits the command line interpreter None QUIT Exits the command line interpreter SLEEP <seconds> Pauses the sessions for a fixed period of time. Useful for adding delays to scripts. The <seconds> field can be any whole number from 1 - to seconds. Once the pause has started, no way exists to continue the session before time runs out, but you can terminate the session and start another one. None? or H Provides help text for CLI commands. None General Management Commands The following table describes the information displayed in the areas that comprise the Enclosure Information screen. Table 5-2 General Management Commands Command Description Restrictions CLEAR SESSION SWITCH [A B] CLEAR SSHKEY Terminate a Terminal session from the enclosure. This is not a graceful termination. The connected user loses any unsaved work. Remove the contents of the Secure Shell authorized keys file. After performing this command, you will not be able to login using the public key-based authentication. Group administrators may only execute this command for the blade PC bays to which they have access. Only enclosure administrators may execute this command. 64 Chapter 5 Command Line Interface ENWW

75 Table 5-2 General Management Commands (continued) Command Description Restrictions CONNECT SWITCH [A B] Opens a remote console connection to switch A or B. A single switch cannot support multiple, simultaneous remote console sessions. Only enclosure administrators may execute this command. DOWNLOAD CERTIFICATE <URL> NOTE: Once you have connected to a switch the key sequence CTRL + SHIFT + _ (underscore) will cause a short menu of commands to appear. These commands are: Disconnect Change Settings Reboot Switch - when connected via RS232 console Break - when connected via telnet Exit Download a CA-supplied PKCS#7 file to replace the current security certificate on the system. Supported protocols are http, ftp, and tftp. Format the URL as protocol://host/path/file. If your ftp server does not support anonymous connections, you can specify a username and password by augmenting the host part in the above format with username:password@host. Only enclosure administrators may execute this command. DOWNLOAD SSHKEY Downloads an authorized key file to use with Secure Shell v2, which can contain the public keys for any enclosure administrator. Supported protocols are http, ftp, and tftp. Format the URL as protocol://host/path/file. If your ftp server does not support anonymous connections, you can specify a username and password by replacing the host part in the previous format with username:password@host. Only enclosure administrators may execute this command. GENERATE CERTIFICATE REQUEST GENERATE CERTIFICATE SELFSIGNED PING {<number>} {<IP address>} <server name>} SET DISPLAY EVENTS [ ON OFF ENCLOSURE BAY]* SET EXPERT {MODE} [ ON OFF ] Generates a PKCS#10 certificate request. Generates a self-signed certificate. Sends ICMP echo messages to a remote IP device. If <number> is omitted, only 5 packets are sent. Packets are sent out at 1-second intervals. Turns event notification on or off. The Integrated Administrator preservers this setting across all logins only for the global ON/ OFF. Turns EXPERT MODE on or off. When EXPERT MODE is on, the system will not prompt the user to confirm actions. Users should exercise caution when working in EXPERT MODE as many actions are not reversible. Only enclosure administrators may execute this command. Only enclosure administrators may execute this command. The <IP address> must be in the form ###.###.###.### where ### ranges from 0 to 255. None None ENWW Operating the Command Line Interface 65

76 Table 5-2 General Management Commands (continued) Command Description Restrictions SET FACTORY SET POWERON DELAY <value> SET SCRIPT MODE [ ON OFF ] SHOW SESSIONS SHOW SSHFINGERPRINT SHOW SSHKEY SHOW ENCLOSURE POWER Sets the Integrated Administrator back to its factory defaults. The Administrator account password does not change. The Integrated Administrator is restarted after all the changes are made. NOTE: This command removes all groups, users, and other customization from the memory of the enclosure, and the information is unrecoverable. This command is an exception to the SET EXPERT command. When executing a SET FACTORY command with the EXPERT MODE on, the command still requires confirmation action. To suppress confirmation, you must have the SCRIPT MODE on. Executing SET FACTORY defaults the asset tag to equal the serial number. Sets the global bay power on delay for all blades after the enclosure is powered on from a cold boot or AC cycle in units of minutes. When SCRIPT MODE is ON, the following commands require a password argument: ADD USER <user name> <password>, SET USER <user name> <password>, and SET PASSWORD <password>. When SCRIPT MODE is OFF, the following commands do not require a password argument: ADD USER, SET USER PASSWORD, and SET PASSWORD. Default values require user interaction. Displays the connection to each bay and switch if one exists. Only one user may connect to each bay and switch at a time. It also shows each user that is currently logged in, the user s port number, connect time, and remote system name. Displays the key fingerprint of the host SSH pubic key of the Integrated Administrator. This can be used from the serial console to validate the identity of the Integrated Administrator before initializing an SSH connection across a network. Displays the contents of the existing Secure Shell authorized keys file that is being used for enclosure administrator keybased authentication. Display power consumption estimates for the enclosure, including all sub-components. This information includes overall power consumption of the enclosure and the peak power and time averaged power across a 24-hr-and-since powered / reset interval. This command cannot be executed if any blades are powered on. Please power off all blades prior to executing this command. Allowed value range is from 1 to 60 minutes. The default is 4 minutes. None Users may not run this command. Group members and group administrators may only see the sessions for bays assigned to groups to which they belong. Enclosure administrators see all sessions None Only enclosure administrators may execute this command. This command provides only estimated power usage based on measurements reported from power-aware blades and estimates from enclosure subsystem components. Use it only as reference information. NOTE: This is only displayed when all blades are poweraware (e.g., bc2x00) only. A note is displayed indicating that the enclosure cannot accurately estimate power consumption. 66 Chapter 5 Command Line Interface ENWW

77 Table 5-2 General Management Commands (continued) Command Description Restrictions ENABLE AUTOPOWERON DISABLE AUTOPOWERON If enabled, the enclosure IA will automatically power on blades when inserted or when AC cycle is applied to the enclosure. If disabled, the blades must be powered on by local access or by using the IA to remotely power on the blades. None None * For event display severity policy-specific settings, these are session-specific only and were added to provide granular control over a specific classification of event severity types. SET DISPLAY EVENTS ENCLOSURE SET DISPLAY EVENTS ENCLOSURE ALL [ ON OFF ] SET DISPLAY EVENTS ENCLOSURE CRITICAL [ ON OFF ] SET DISPLAY EVENTS ENCLOSURE INFORMATIONAL [ ON OFF ] SET DISPLAY EVENTS ENCLOSURE MAJOR [ ON OFF ] SET DISPLAY EVENTS ENCLOSURE MINOR [ ON OFF ] SET DISPLAY EVENTS ENCLOSURE NORMAL [ ON OFF ] SET DISPLAY EVENTS BAY SET DISPLAY EVENTS BAY ALL [ ON OFF ] SET DISPLAY EVENTS BAY CRITICAL [ ON OFF ] SET DISPLAY EVENTS BAY INFORMATIONAL [ ON OFF ] SET DISPLAY EVENTS BAY MAJOR [ ON OFF ] SET DISPLAY EVENTS BAY MINOR [ ON OFF ] SET DISPLAY EVENTS BAY NORMAL [ ON OFF ] For details concerning event classification see Event Icons and Details on page 157. ENWW Operating the Command Line Interface 67

78 User Account Commands Table 5-3 User Account Commands Command Description Restrictions ADD GROUP <group name> ADD USER <user name> {<password>} Adds a group to the system The default group description is blank. Adds a user to the system If a password is not given, the user is prompted for one. If SCRIPT MODE is enabled, the password is not optional and must be provided. Only enclosure administrators may execute this command. A maximum of 20 groups may be added to the system. The <group name> must be unique to all other group names and user names and is case-sensitive. It must be 1-13 characters long and can include alphanumeric, dash, and underscore characters. It must begin with a letter. NOTE: Administrator, switch, switcha, switchb, SAM, and all are reserved names and cannot be used. This restriction is not casesensitive. See Factory Default Settings on page 162 for factory default groups accounts. Only enclosure administrators may execute this command. A maximum of 25 users may be added in addition to the reserved accounts. The <user name> must be unique to all other group names and user names and is case-sensitive. It must be 1-13 characters long and can include alphanumeric, dash, and underscore characters. It must begin with a letter. The <password> must be 3-8 characters long and includes all printable characters. If a password is not entered, the user is prompted for one. NOTE: Administrator, switch, switcha, switchb, SAM, and all are reserved names and cannot be used. This restriction is not casesensitive. See Factory Default Settings on page 162 for factory default user accounts. 68 Chapter 5 Command Line Interface ENWW

79 Table 5-3 User Account Commands (continued) Command Description Restrictions ASSIGN ADMINISTRATOR (RIGHTS) <user name> ASSIGN BAY [ALL <bay number> {[, - ] <bay number>}] <group name> ASSIGNS USER <user name> <group name> {[VIEW MODIFY]} DISABLE USER <user name> ENABLE USER <user name> REMOVE GROUP [ ALL <group name> ] REMOVE USER [ALL <user name>] Promotes a user to have enclosure administrator permissions. Group membership is not detected in case of enclosure administrator rights are removed at a later time. Assigns one or more bays to a group. If a bay is already assigned to a group, it must first be unassigned before executing this command. Assigns a user to a group with View rights (for group members) or View/Modify rights (for group administrators) If View or View/Modify is not specified, View is chosen by default. Disables a user account. The user is immediately logged out of the system and prevented from log in until the account is enabled. Enables a user account that was previously disabled by the DISABLE USER command Removes a group and automatically unassigns all bays within the group. Removes a user from the system. If ALL is specified, the command is run for all users except the default system accounts. Only enclosure administrators may execute this command. The <user name> is casesensitive. Only enclosure administrators may execute this command. The <group name> is casesensitive. Only enclosure administrators may execute this command. The <user name> is casesensitive. Only enclosure administrators may execute this command. The <user name> is casesensitive. The administrator account cannot be disabled. Only enclosure administrators may execute this command. The <user name> is casesensitive. NOTE: The default SAM administrator account is disabled by default. This was provided for HP Session Allocation Manager (SAM) support. It is highly recommended that the SAM account password be changed either before or immediately after enabling, as all Integrated Administrators will have the same default SAM account password of SamUser123. Only enclosure administrators may execute this command. The <group name> is casesensitive. Only enclosure administrators may execute this command. The <user name> is casesensitive. NOTE: Administrator, switch, SAM, switcha, and switchb, cannot be removed. ENWW Operating the Command Line Interface 69

80 Table 5-3 User Account Commands (continued) Command Description Restrictions SET GROUP {DESCRIPTION} <group name> <description> SET PASSWORD {<password>} SET USER CONTACT {<user name>} <contact info> SET USER FULL NAME {<user name>} <full name> SET USER PASSWORD <user name> Sets a group s description. Sets the password of the user currently logged into the Integrated Administrator. If a password is not given on the command line, the user is prompted for one. NOTE: This command is not valid in SCRIPT MODE if password is not specified. If no <user name> exists, the command modifies the contact info of the user that executed the command. Sets a user s full name. If no <user name> exists, the command modifies the full name of the user that is currently logged in. Sets a user s password. If you do not supply a password on the command line, you are prompted for one. NOTE: This command is not valid in SCRIPT MODE if password is not specified. Only enclosure administrators may execute this command. The <description> must be 1-20 characters long and can include alphanumeric, dash, and underscore characters. The default group description is blank. If spaces are part of the contact information, enclose the information in quotes. The <password> must be 3-8 characters long and can include all printable characters. Only enclosure administrators may modify another user s contact information. The <user name> is casesensitive. The <contact info> must be 1-20 characters long and can include alphanumeric, dash, sign, and space characters. The default contact information is blank. If spaces are part of the contact information, enclose the information in quotes. Only enclosure administrators may modify another user s full name. The <user name> is casesensitive. The <contact info> must be 1-20 characters long and can include alphanumeric, dash, underscore, and space characters. The default full name is blank. If spaces are part of this information, enclose the information in quotes. Only enclosure administrators may modify another user s password. Only the Administrator account may modify the password of the Administrator account. The <user name> is casesensitive. The <new password> must be 3-8 characters long and can include all printable characters. 70 Chapter 5 Command Line Interface ENWW

81 Table 5-3 User Account Commands (continued) Command Description Restrictions SHOW GROUP [<group name> ALL] SHOW USER [<user name> ALL] UNASSIGN ADMINISTRATOR (RIGHTS) <user name> UNASSIGN USER <user name> <group name> Displays the group s description, a list of members with View permission, a list of members with View/Modify permission, number of bays, and a list of each of the bay the group manages. Displays the user s full name, contact, whether the user has administrator rights, whether the account is enabled, and the groups for which the user has View or View/Modify permissions. If ALL is entered, this information is given for every user and an asterisk before the user name denotes the current user. Takes enclosure administrator rights from a user. Removes the user from the specified group. Group members and group administrators only see the groups in which they have membership. Users may not execute this command. The <group name> is casesensitive. If spaces are part of this information, enclose the information in quotes. Only enclosure administrators may view another user s information. The <user name> is casesensitive. Users who do not have enclosure administrator permissions only see their user information. Only enclosure administrators may execute this command. The Administrator account cannot have enclosure administrator rights taken away. The <user name> is casesensitive. Only enclosure administrators may execute this command. The <user name> and <group name> are case-sensitive. Enclosure Network Configuration Commands Table 5-4 Enclosure Network Configuration Commands Command Description Restrictions ADD SNMP TRAPRECEIVER <IP address> Adds an IP address to receive SNMP traps. Only v1 traps are supported. Traps are directed to the SNMP default port of 162. Only enclosure administrator may execute this command. DISABLE SECURESH Disables Secure Shell account to the Integrated Administrator. Only enclosure administrators may execute this command. DISABLE SNMP Disables SNMP support for the Integrated Administrator. Does not clear the SNMP trap receivers that have been configured. SNMP trap receivers can still be added and removed. If SNMP is disabled, Systems Insight Manage agents do not work properly. Only enclosure administrators may execute this command. ENWW Operating the Command Line Interface 71

82 Table 5-4 Enclosure Network Configuration Commands (continued) Command Description Restrictions DISABLE TELNET Disables Telnet access to the Integrated Administrator. Only enclosure administrators may execute this command. DISABLE WEB DOWNLOAD CONFIG <URL> Disables HTTP and HTTPS access to the Integrated Administrator. This command prevents access to the Web-based user interface. The files are auto-executed in script mode. The file is not allowed to change the password of the Administrator account. Supported protocols are http, ftp, and tftp. Format the URL as protocol://host/path/file. If your ftp server does not support anonymous connections, you can specify a user name and password by replacing the host part in the previous format with username:password@host. Only enclosure administrators may execute this command. Only enclosure administrators may execute this command. The IP address must be in the form ###.###.###.### where ### ranges from 0 to 255. ENABLE SECURESH Enables Secure Shell account to the Integrated Administrator. Only enclosure administrators may execute this command. ENABLE SOAP DISABLE SOAP Enables SOAP support for the Integrated Administrator for all administrator accounts. Disables SOAP support for the Integrated Administrator for all administrator accounts. This does not affect the builtin SAM user account. See Event Icons and Details on page 157 for supported SOAP commands. This does not affect the builtin SAM user account. See Event Icons and Details on page 157 for supported SOAP commands. ENABLE SNMP Enables SNMP support for the Integrated Administrator. Only enclosure administrators may execute this command. ENABLE TELNET Enables Telnet access to the Integrated Administrator. Only enclosure administrators may execute this command. ENABLE WEB REMOVE SNMP TRAPRECEIVER <IP address> SET DNS <primary address> {<secondary address>} Enables HTTP and HTTPS access to the Integrated Administrator. Removes an IP address from the list of systems to receive SNMP traps Sets the primary and secondary DNS server addresses These servers are only used if the system is currently configured to use a static IP address. Only enclosure administrators may execute this command. Only enclosure administrators may execute this command. The IP address must be in the form ###.###.###.### where ### ranges from 0 to 255. Only enclosure administrators may execute this command. The IP address must be in the form ###.###.###.### where ### ranges from 0 to Chapter 5 Command Line Interface ENWW

83 Table 5-4 Enclosure Network Configuration Commands (continued) Command Description Restrictions SET GATEWAY <IP address> Sets the network default gateway This gateway is only used if the system is configured to use a static IP address. Only enclosure administrators may execute this command. The IP address must be in the form ###.###.###.### where ### ranges from 0 to 255. SET IPCONFIG DHCP {DYNAMICDNS} SET IPCONFIG STATIC <IP address> <netmask> {<gateway> {<DNS1 address> {<DNS2 address>}}} Sets up the Integrated Administrator in dynamic IP addressing mode. Any established gateway and DNS addresses are cleared. The optional DYNAMICDNS argument enables Dynamic DNS. Establishes the Integrated Administrator IP configuration in static addressing mode. In this mode the IP address and Netmask will be set to <IP address> and <netmask> respectively. These will take affect immediately. The gateway address and/or DNS addresses will be cleared if they are omitted. Only enclosure administrators may execute this command. Only enclosure administrators may execute this command. The IP address must be in the form ###.###.###.### where ### ranges from 0 to 255. SET SNMP COMMUNITY [READ WRITE] <community name> NOTE: The Gateway and DNS address can also be set by using the SET GATEWAY and SET DNS commands. Sets the community name for the read or write SNMP community The default names for the read and write community are public and blank, respectively. If a blank write community name is given, SNMP set commands are disabled until a nonempty community name is given. Only enclosure administrators may modify another user s contact information. The write <community name> must be 1-20 characters long, and the read <community name> must be 1-20 characters long. Both can include alphanumeric, dash, and underscore characters. The default read community name is public. The default write community name is blank. SET SNMP CONTACT <contact> Configures the name of the system contact. Can use any ASCII-printable character sign for contact and location. Only enclosure administrators may execute this command. The <contact> must be 1-20 characters long and can include alphanumeric, dash, sign, and space characters. If spaces are part of this information, enclose the information in quotes. The only way to clear this field is with the SET FACTORY command. ENWW Operating the Command Line Interface 73

84 Table 5-4 Enclosure Network Configuration Commands (continued) Command Description Restrictions SET SNMP LOCATION <location> SHOW NETWORK SHOW SNMP SET TRAP POLICY SHOW TRAP POLICY Configures the SNMP location of the enclosure. Empty strings are not allowed. The default location is blank. Displays the DHCP state, Dynamic DNS state, IP address, subnet mask, gateway address, primary and secondary DNS addresses, HTTP and HTTPS server status, SNMP status, Secure Shell status, Telnet status, MAC address, SOAP status, NTP status, IP Security status, IP security configuration and AlertMail status of the enclosure. Displays the SNMP system name, location, and contact, read community name, write community name, and a list of the trap destinations. This configures the enclosure SNMP agent to send traps as per selection in the trap policy settings. See trap description in the Management Information Base (MIB) file CPQRACK.MIB for further details. This displays the list of enclosure SNMP traps that the enclosure will generate. The trap is selected if an 'X' is in shown in the brackets. See trap description in the Management Information Base (MIB) file CPQRACK.MIB for specfic trap functionality. Only enclosure administrators may execute this command. The <location> must be 1-20 characters long and can include alphanumeric, dash, sign, and space characters. If spaces are part of this information, enclose the information in quotes. The only way to clear this field is with the SET FACTORY command. None Only enclosure administrators may execute this command. Only enclosure administrators may execute this command. None Enclosure Management Commands Table 5-5 Enclosure Management Commands Command Description Restrictions CLEAR SYSLOG ENCLOSURE Clears the enclosure system log. Only enclosure administrators may execute this command. Once deleted, this information cannot be restored. DISABLE ALERTMAIL Disables sending for Integrated Administrator alerts. Only enclosure administrators may execute this command. DISABLE NTP Disables automatic updates of the date and time to the Integrated Administrator. Some network enable/disable parameters are exclusive. ENABLE ALERTMAIL Enables sending for Integrated Administrator alerts. Only enclosure administrators may execute this command. ENABLE NTP Enables automatic time and date updates to Integrated Administrator. Only enclosure administrators may execute this command. 74 Chapter 5 Command Line Interface ENWW

85 Table 5-5 Enclosure Management Commands (continued) Command Description Restrictions SET SYSLOG POLICY [ENCLOSURE BAY ] POWEROFF ENCLOSURE {FORCE} RESTART SET ALERTMAIL [MAILBOX SENDERDOMAIN SMTPSERVER] SET DATE MMDDhhmm {{CC}YY} {TZ} SET NTP [PRIMARY SECONDARY POLL] SET TIME MMDDhhmm{{CC} YY} {TZ} This command turns system log message posting on or off per severity type. The Integrated Administrator preservers this setting across all logins/users Performs a graceful shutdown of the enclosure. Each blade is first gracefully shut down. If the FORCE argument is given, the enclosure and all blades are immediately shutdown. Restarts the Integrated Administrator. This does not affect operation of bays in the system. Sets the address of the alert recipient, the domain name, and the mail server address. Sets the date of the enclosure with the following definitions: MM: month DD: day hh: hour (24-hour format) mm: minute CC: century YY: year TZ: time zone (case-sensitive) If the time zone is left blank, the current time is left in effect. NOTE: After setting the time-zone, you must perform an IA restart command. Sets the IP address of the primary and secondary NTP servers. Also sets the frequency of the updates. Changes the enclosure time with the following definitions: MM: month DD: day hh: hour (24-hour format) mm: minute CC: century YY: year TZ: time zone (case-sensitive) If the time zone is left blank, the current time is left in effect. NOTE: After setting the time, you must perform an IA restart command. None Only enclosure administrators may execute this command. Only enclosure administrators may execute this command. None Only enclosure administrators may execute this command. MM is an integer from 1-12 DD is an integer from 1-31 hh is an integer from 0-23 mm is an integer from 0-59 For a list of time zones, see Time Zone Settings on page 165. NTP must be disabled before manually setting the date and time. None Only enclosure administrators may execute this command. MM is an integer from 1-12 DD is an integer from 1-31 hh is an integer from 0-23 mm is an integer from 0-59 For a list of time zones, see Time Zone Settings on page 165. NTP must be disabled before manually setting the date and time. ENWW Operating the Command Line Interface 75

86 Table 5-5 Enclosure Management Commands (continued) Command Description Restrictions SET ENCLOSURE ASSET {TAG} <asset tag> SET ENCLOSURE NAME <enclosure name> SET ENCLOSURE UID [ON OFF] SET RACK NAME <rack name> SET POWER HISTORY INTERVAL [BLADE ENCLOSURE] SHOW CONFIG SHOW DATE SHOW TIME Changes the enclosure asset tag Changes the enclosure name Turns the enclosure Unit Identification LED on or off Sets the name for the rack where that enclosure resides Sets the policy for the power reporting data collection interval for both an individual blade and for the enclosure Displays the script required to recreate the settings of the enclosure Passwords are not included for any user. Displays the current date, time, and time zone of the internal clock of the enclosure. Displays the current time and time zone of the internal clock of the enclosure. Only enclosure administrators may execute this command. The <asset tag> must be 1-32 characters long and can include alphanumeric, dash, and underscore characters. The default enclosure asset tag is blank. To set a blank asset tag, specify the blank value using the quotes. Only enclosure administrators may execute this command. The <enclosure name> must be 1-32 characters long and can include alphanumeric, dash, and underscore characters. The default enclosure name is IA-MAC, where MAC is replaced with the actual MAC address. Only enclosure administrators may execute this command. Only enclosure administrators may execute this command. The <rack name> must be 1-32 characters long and can include alphanumeric, dash, and underscore characters. The default rack name is UnnamedRack. Only enclosure administrators may execute this command. Allowable settings are 1, 5, 10, 30 and 60 minutes respectively and the maximum buffer size is 24 hours. Only the enclosure administrators may execute this command. None None SHOW DISPLAY EVENTS Displays whether event notification is on or off. None 76 Chapter 5 Command Line Interface ENWW

87 Table 5-5 Enclosure Management Commands (continued) Command Description Restrictions SHOW ENCLOSURE FAN [<fan number> ALL]< SHOW ENCLOSURE INFO SHOW ENCLOSURE POWERSUPPLY [<power supply number> ALL] SHOW ENCLOSURE STATUS SHOW ENCLOSURE TEMP SHOW ENCLOSURE TEMP LIST SHOW RACK NAME <rack name> SHOW POWER SUMMARY Displays the status, redundancy, partner, speed, location and part number for the requested fan. If ALL is entered, this information is shown for all fans. NOTE: This command may also be used to display information for fan #5 and fan #6, the non-removable power supply fans. Fan #5 and #6 are only available for HP BladeSystem PC Blade Enclosure G2 enclosures. Displays the enclosure name, type, part number, serial number, and asset tag; the Integrated Administrator software (including build #) and hardware version; the Integrated Administrator MAC address, and the autopoweron feature information, the bay power on delay value, the interconnect tray type, UUID, part number, and serial number. Displays the enclosure version, power supply status, AC input status, capacity, input voltage range #1 (measured in Volts), input voltage range #2 (if necessary, measured in Volts), input frequency range (measured in Hertz), part number, serial number, power supply spare part number, and hardware revision for either the specified power supply or for all power supplies if ALL is specified. For the PC Blade Enclosure G2, an additional value, Input Voltage Range #3 is displayed. Displays the enclosure status, Integrated Administrator health, unit identification LED status of the enclosure, along with the following values for the power subsystem: status, redundancy state, total capacity, redundant capacity, resilient capacity, power allocated and power available. Displays the locale, status (OK, warm, degraded, or failed), temperature in degrees Fahrenheit, thresholds, and temperature sensors. For the HP BladeSystem PC Blade Enclosure G2, also displays power supply temperatures from internal and inlet sensors Displays sensors in tabular format Shows the name for the rack where the enclosure resides The default rack name is UnnamedRack. This command displays the redundancy state, the total maximum capacity, the resilient capacity, and the redundant capacity of the power subsystem. It indicates the currently allocated and available capacity as compared to the redundant capacity and will indicate, in Watts, if the redundant capacity has been exceeded. Also, the current instantaneous power consumption is indicated as well within this section. Please see section H Power Management and Redundant Power Supply for additional details. Additionally, the enclosure and per bay allocation is displayed in tabular form to indicate how the enclosure IA has allocated power for the enclosure. None None None None None None None None ENWW Operating the Command Line Interface 77

88 Table 5-5 Enclosure Management Commands (continued) Command Description Restrictions SHOW POWER HISTORY BLADE <bay number> SHOW POWER HISTORY ENCLOSURE SHOW POWER HISTORY INTERVAL [BLADE ENCLOSURE <bay number> ALL] SHOW SYSLOG ENCLOSURE [CRIT WARN NOTICE INFO] SHOW TRAY INFO Displays the last 24 hours worth of data points for average power consumption for the specified bay or blade as determined by the interval setting and number of samples. NOTE: These samples are not preserved through a power cycle or reset. Displays the last 24 hours worth of data points for average power consumption as determined by the interval setting and number of samples. NOTE: These samples are not preserved through a power cycle or reset. Shows the interval for the blade or enclosure power history. If BLADE is selected, can show interval for ALL. Displays the syslog of the enclosure with 22 lines per screen. Displays the syslog for the enclosure and uses optional parameter to filter the display if provided. The SYSLOG Type:IML conversion is as follows: CRIT: Critical WARN: Major WARN: Minor NOTICE: Normal INFO: Informational Typing q quits the command, any other key shows the next screen if more information exists to display. Typing c continuously displays the System Log without page breaks. Displays the manufacturer, product name, part number, serial number, and spare number of the interconnect tray. None None None Only enclosure administrators may execute this command. None 78 Chapter 5 Command Line Interface ENWW

89 Table 5-5 Enclosure Management Commands (continued) Command Description Restrictions UPDATE IMAGE <URL> UPLOAD CONFIG <URL> Downloads a new image from a blade over the network and uses the image to update the firmware of the enclosure. Upload the current runtime configuration to the specified FTP or TFTP server. Only enclosure administrators may execute this command. URL can be any of the following: tftp://host/path ftp:// ftp://host/path where host is a fully qualified domain name or an IP address and path is the pathname of the flash image to download Only enclosure administrators may execute this command. For system log severity policy specific settings, these are global and set by the administrator account only. These were added to provide granular control over a specific classification of system log message severity types. SET SYSLOG POLICY ENCLOSURE SET SYSLOG POLICY ENCLOSURE ALL [ ON OFF ] SET SYSLOG POLICY ENCLOSURE INFORMATIONAL [ ON OFF ] SET SYSLOG POLICY ENCLOSURE MAJOR [ ON OFF ] SET SYSLOG POLICY ENCLOSURE MINOR [ ON OFF ] SET SYSLOG POLICY ENCLOSURE NORMAL [ ON OFF ] SET SYSLOG POLICY BAY SET SYSLOG POLICY BAY ALL [ ON OFF ] SET SYSLOG POLICY BAY INFORMATIONAL [ ON OFF ] NOTE: Default is OFF. SET SYSLOG POLICY BAY MAJOR [ ON OFF ] SET SYSLOG POLICY BAY MINOR [ ON OFF ] SET SYSLOG POLICY BAY NORMAL [ ON OFF ] ENWW Operating the Command Line Interface 79

90 Blade PC Bay Management Commands Table 5-6 Blade PC Bay Management Commands Command Description Restrictions CLEAR BAY BOOT [FIRST ONCE ALWAYS] [ALL <ay number> {[, - ] <bay number>}] Clears the setting for the IPL to be passed to the blade at the next reboot. The FIRST argument resets the IPL for all subsequent reboots. The ONCE argument resets the IPL for the next reboot only. The Always argument resets the IPL for every reboot. This command is only valid for present blades. Only enclosure administrators may execute this command. CLEAR SESSION BAY <bay number> CONNECT BAY <bay number> GENERATE NMI <bay number> POWEROFF BAY <bay number> {[, - ] <bay number>} {FORCE} POWERON BAY <bay number> {[, - ] <bay number>} {[PXE HDD RBSU]} This command may require a firmware update for the BIOS ROM of certain HP blade PCs. Terminates a Terminal session from the enclosure. This is not a graceful termination. The connected user loses any unsaved work. Opens a remote console session to the blade PC with that blade PC bay number. A blade PC can only support one remote console session at a time. Generates an NMI on the specified blade. The consequences of an NMI are operating system specific. Performs a graceful shutdown of the blade PC in the specified bay. If the FORCE argument is given, the blade PC is immediately shut down. This means the blade PC could lose data or become unstable. If no blade PC is in the specified bay, the user is told that the bay is empty. Powers on the specified blade PC. If no blade PC is in the specified bay, the user is told that the bay is empty. The optional boot arguments may require a firmware update for the BIOS ROM of certain HP blade PCs. Adding an optional boot argument forces the blade to abandon the regular boot order and forces a boot using the specified method. Enclosure administrators may execute this command for blade PC bays and the interconnect switch. Only enclosure and group administrators may execute this command. Only enclosure and group administrators may execute this command. NOTE: The blade s specific operating system must support the NMI crash dump feature or unpredictable results could occur on the blade. Please consult with your specific OS documentation or vendor for details. Only enclosure and group administrators may execute this command. Only enclosure and group administrators may execute this command. 80 Chapter 5 Command Line Interface ENWW

91 Table 5-6 Blade PC Bay Management Commands (continued) Command Description Restrictions REBOOT BAY <bay number> {[, - ] <bay number>} {FORCE} {[PXE HDD RBSU]} SET BAY BOOT FIRST [HDD PXE] <bay number> {[, - ] <bay number>} SET BAY BOOT ONCE [HDD PXE RBSU] <bay number> {[, - ] <bay number>} SET BAY UID <bay number> {[, - ] <bay number>} [ON OFF] SHOW BAY INFO [ALL <bay number> {[, - ] <bay number>}] SHOW BAY INFO LIST [ALL <bay number> {[, - ] <bay number>}] SHOW BAY LIST [ALL <group name>] Sends a request to the blade PC to perform a graceful shutdown. The blade PC is then powered on. If no blade PC is in the specified bay, the user is told that the bay is empty. The optional boot arguments may require a firmware update for the BIOS ROM of certain HP blade PCs. Adding an optional boot argument forces the blade to abandon the regular boot order and forces a boot using the specified method. Sets the IPL for each subsequent reboot. This setting is only valid for present blades and is cleared if a blade is removed. This command may require a firmware update for the BIOS ROM of certain HP blade PCs. Sets the boot device to be used on the next boot of the bay(s) specified. This setting is only valid on present blades and is cleared if the blade is removed. This command may require a firmware update for the BIOS ROM of certain HP blade PCs. Turns a Unit Identification LED on the blade PC on or off. Displays the following fields: Assigned to group, type, name, installed operating system, part number, serial number, asset tag, BIOS version, all CPU types and associated maximum speeds, memory, NIC #1 MAC, and NIC #2 MAC. For bc2x00 blades, the BMC revision is also displayed. BMC version 22 or earlier does not provide this information, so it is assumed version 22h or earlier and indicated as such. When available, future versions will support this feature. Earlier versions are indicated by (N/A). For blades with BIOS 3.x series, also displays blade Universal Unique Identifier (UUID). If no blade PC is in the bay, the user is shown the assigned to group and the blade PC type. Displays Blade Management Controller (BMC) revision, BIOS revision, and pending boot order for blades in tabular format. Displays the assigned to group, remote console user, and blade PC name for each bay in a particular group if a group name is specified or all bays if ALL is specified. Only enclosure and group administrators may execute this command. Only enclosure administrators may execute this command. Only enclosure and group administrators may execute this command. Only enclosure and group administrators may execute this command. Group members and group administrators only see information for the bays in their groups. Group members and group administrators only see information for the bays in their groups. Group members and group administrators only see information for the bays in their groups. ENWW Operating the Command Line Interface 81

92 Table 5-6 Blade PC Bay Management Commands (continued) Command Description Restrictions SHOW BAY STATUS [ALL <bay number> {[, - ] <bay number>}] Displays the power (On or Off), assigned to group, remote console user, health, thermal (OK, warm, degraded, or failed), Unit Identification LED (On or Off), and power state for the blade PC. Group members and group administrators only see information for the bays in their groups. SHOW BAY STATUS LIST [ALL <bay number> {[, - ] <bay number>}] SHOW BAY POWER [ ALL <bay number> {[, - ] <bay number>}] For bc2x00 blades with BIOS 3.x series, also displays diagnostic adaptor, system BIOS POST status, network (PXE) booting status, front IO blanking feature status, and automated system recover (ASR) mode status. Displays bay temperature info and status in tabular format. Displays the measured DC power consumption, AC power consumption estimate, power averaged over the last 24-hr period, and the time averaged power since the blade was inserted. Group members and group administrators only see information for the bays in their groups. Group members and group administrators only see information for the bays in their groups. NOTE: AC Estimate equals the measured blade DC power divided by the estimated power supply efficiency of the enclosure. Earlier versions are indicated by (N/A). SHOW BAY POWER LIST [ ALL <bay number> {[, - ] <bay number>}] Displays all of the blade power consumption metrics as mentioned above except for the AC power consumption estimate in a tabular form for ease of viewing. Group members and group administrators only see information for the bays in their groups. SHOW BAY TEMP [ ALL <bay number> {[, - ] <bay number>}] SHOW BAY TEMP LIST [ ALL <bay number> {[, - ] <bay number>}] SHOW SYSLOG BAY <bay number> UNASSIGN BAY [ALL <bay number> {[, - ] <bay number>}] Displays the actual temperature measures for the CPU, graphics processor, and ambient sensors. Displays bay temperature info and status in tabular format. Displays the syslog of the specified blade with 22 lines per screen. Typing q quits the command; any other key shows the next screen if more information is available to display. The system log of the blade PC is not stored between reboots, so the information only includes what has taken place since the last power on of the Integrated Administrator. Typing c continuously displays the System Log without page breaks. Removes the bay(s) from their assigned group. NOTE: Only bc2x00 blades provide power measurements. All non-power-aware blades report an (N/A). Group members and group administrators only see information for the bays in their groups. Group members and group administrators only see information for the bays in their groups. Group members and group administrators only see information for the bays in their groups. Only enclosure administrators may execute this command. 82 Chapter 5 Command Line Interface ENWW

93 Command Line Event Messages Table 5-7 Command Line Event Messages Message Possible Cause User Event Messages User Permission Change One of the following has occurred: A user has been added, removed, or modified. A user s group membership has been modified. The blade PC bay membership has been changed for a group with at least one user. Enclosure Event Messages Enclosure Shutdown Enclosure Status Change Fan Inserted Fan Removed Fan Status Change Power Supply Inserted Power Supply Overload Power Supply Redundancy Change The enclosure is being shut down The Integrated Administrator detected a change in status due to a change in the state of one or more hardware components or blade PC readings. A fan has been inserted. A fan has been removed. The status of fan has changed. A power supply has been inserted. The power system is overloaded. Check each power supply status to determine cause. The power supplies are now either redundant or no longer redundant. The power subsystem changed to either redundant, resilient, or non-redundant status. Power Supply Removed Power Supply Status Change Restart Event Thermal Status Change A power supply has been removed. The status of a power supply has changed. The Integrated Administrator is about to restart. The state of a thermal sensor has changed. NOTE: For bc2x00 blades, thermal events reported by the bay sensor include the bay temperature for the hottest subcomponent sensor reported value. Bay Event Messages Bay Event Blade Inserted Blade Removed A blade PC bay has been assigned or unassigned from a group. A blade PC was inserted into the enclosure. A blade was removed from the enclosure. ENWW Operating the Command Line Interface 83

94 Table 5-7 Command Line Event Messages (continued) Message Blade Status Change Possible Cause The health service or Blade Management Controller (BMC) detected a change in status due to a change in the state of one or more hardware components or due to a software OS lockup if Automatic System Recovery (ASR) is enabled on the blade. For bc2x00 blades, a diagnostic string accompanies the event message. See Error Messages on page 142 for possible diagnostic strings and their descriptions. Blade in bay # has powered off. Blade in bay # has powered on. Blade in bay # has started flash mode. NOTE: Only blades that support a BMC display this message. Additionally, once flash mode is completed a BAY REMOVED, a BAY INSERTED event message appears. This is a normal part of the flash process and can be safely ignored. Blade BMC in bay # has exited flash mode and will autopowercycle in 10 seconds. Blade BMC in bay # will now auto powercycle OFF and then back ON. Blade in bay # POST completed. Blade in bay # unexpected shutdown occurred. Blade in bay # entered PXE boot mode. Blade in bay # exited PXE boot mode. Blade in bay # warm reset occurred. Blade in bay # Diagnostic Adaptor status changed to [Present Absent]. Blade in bay # Front IO Blanking Feature status changed to [Active Inactive]. Blade in bay # system BIOS flashing completed. Blade in bay # system BIOS flashing started. Power On Delay Blades will be allowed to power on in # seconds Blades will auto-power on now (manual power control is allowed) Blades are allowed to power on now (manual power control is allowed) 84 Chapter 5 Command Line Interface ENWW

95 Functionality Exclusive to the Command Line Interface The following table identifies functions or capabilities available to the Command Line Interface (CLI) and unavailable when using the Web-based interface. Table 5-8 Functions Exclusive to the Command Line Interface General and General Management Commands Function Description Capability Exclusive to CLI General Commands Sleep <seconds> Pauses the sessions for a fixed period of time. Useful for adding delays to scripts. The <seconds> field can be any whole number from Once the pause has started, no way exists to continue the session before time runs out, but you can terminate the session and start another one. None General Management Commands CLEAR SESSION SWITCH [A B] CLEAR SSHKEY DOWNLOAD CERTIFICATE <URL> DOWNLOAD SSHKEY GENERATE CERTIFICATE REQUEST GENERATE CERTIFICATE SELFSIGNED PING {<number>} [<IP address> <server name>] SET DISPLAY EVENTS [ON OFF] SET EXPERT {MODE} [ON OFF] Terminates a Terminal session from the enclosure This is not a graceful termination. The connected user loses any unsaved work. Removes the contents of the Secure Shell authorized keys file. After performing this command, you will not be able to login using public key-based authentication. Downloads a CA supplied PKCS#7 file to replace the current security certificate on the system. Supported protocols are http, ftp, and tftp. Format the URL as protocol://host/path/file. If your ftp server does not support anonymous connections, you can specify a username and password by augmenting the host part in the above format with username:password@host. Downloads an authorized key file to use with Secure Shell v2 which can contain the public keys for any enclosure administrator. Supported protocols are http, ftp, and tftp. Format the URL as protocol://host/path/file. If your ftp server does not support anonymous connections, you can specify a username and password by replacing the host part in the previous format with username:password@host. Generates a PKCS#10 certificate request Generates a self-signed certificate Sends ICMP echo messages to a remote IP device If <number> is omitted, only 5 packets are sent. Packets are sent out at 1-second intervals. Turns event notification on or off Turns EXPERT MODE on or off. When EXPERT MODE is turned on, the system will not prompt the user to confirm actions. Users should exercise caution when working in EXPERT MODE as many actions are not reversible. All Only enclosure administrators may execute this command. All Only enclosure administrators may execute this command. All All All All None ENWW Functionality Exclusive to the Command Line Interface 85

96 Table 5-8 Functions Exclusive to the Command Line Interface General and General Management Commands (continued) Function Description Capability Exclusive to CLI SET FACTORY SET SCRIPT MODE [ON OFF] SHOW EXPERT {MODE}: SHOW SESSIONS SHOW SSHFINGERPRINT SHOW SSHKEY Sets the Integrated Administrator back to its factory defaults The password of the Administrator account does not change. The Integrated Administrator is restarted after all the changes are made. NOTE: This command removes all groups, users, and other customization from the memory of the enclosure, and the information is unrecoverable. This command is an exception to the SET EXPERT command. When executing a SET FACTORY command with the EXPERT MODE on, the command still requires confirmation action. To suppress confirmation, you must have the SCRIPT MODE on. Executing SET FACTORY defaults the asset tag to equal the serial number. When SCRIPT MODE is on, all prompting and verifications of entries cease. If SCRIPT MODE is on, the following commands require a password argument or a blank password will be assigned: ADD USER, SET USER PASSWORD, or SET PASSWORD. An enclosure administrator must change the password so that the user can log in to the system. Default values are used for any parameters that would normally require user interaction. Displays the current EXPERT MODE setting for the current user. Displays the connection to each bay and switch if one exists. Only one user may connect to each bay and switch at a time. It also shows the users that are currently logged in, their port number, connect time, and remote system name. Displays the key fingerprint of the host SSH public key for the Integrated Administrator. This can be used from the serial console to validate the identity of the Integrated Administrator before initializing an SSH connection across a network. Displays the contents of the existing Secure Shell authorized keys file that is being used for enclosure administrator keybased authentication. All All None All None Only enclosure administrators may execute this command. Table 5-9 Functions Exclusive to the Command Line Interface Enclosure Management Commands Function Description Capability Exclusive to CLI Enclosure Management Commands SHOW CONFIG SHOW ENCLOSURE FAN [<fan number> ALL] Displays the script required to recreate the settings of the enclosure. Passwords are not included for any user. Displays the status, redundancy, partner, speed, and part number for the requested fan. All The command line adds the fan partner. 86 Chapter 5 Command Line Interface ENWW

97 Table 5-9 Functions Exclusive to the Command Line Interface Enclosure Management Commands (continued) Function Description Capability Exclusive to CLI SHOW ENCLOSURE POWERSUPPLY [<power supply number> ALL] Displays the status of the power supply, AC input status, capacity, input voltage range #1 (measured in Volts), input voltage range #2 (measured in Volts), input frequency range (measured in Hertz), part number, serial number, and hardware revision for the specified power supply if one is specified or for all power supplies if ALL is given. The command line adds the input voltage ranges, input frequency range, serial number, and hardware revision. SHOW ENCLOSURE STATUS CLEAR SESSION BAY <bay number> Under an enclosure status heading, this command displays the health of the enclosure, Integrated Administrator health, and unit identification LED. Under a power status heading, this command displays the power status and capacity. Terminates a Terminal session from the enclosure. The command line adds the Integrated Administrator health. All CLEAR BAY BOOT [FIRST ONCE] [ALL <bay number> {[, - ] <bay number>}] Clears the setting for the IPL to be passed to the blade at the next reboot. The FIRST argument resets the IPL for all subsequent reboots. The ONCE argument resets the IPL for the next reboot only. This command is only valid for present blades. Only enclosure and group administrators may execute this command. This command may require a firmware upgrade for the BIOS ROM of certain HP blade PCs. GENERATE NMI <bay number> POWERON BAY <bay number> {[, - ] <bay number>} {[PXE HDD RBSU]} REBOOT BAY <bay number> {[, - ] <bay number>} {FORCE} {[PXE HDD RBSU]} SET BAY BOOT FIRST [HDD PXE] <bay number> {[, - ] <bay number>} Powers on the specified blade PC. If no blade PC is in the specified bay, the user is told that the bay is empty. The optional boot arguments may require a firmware upgrade for the BIOS ROM of certain HP blade PCs. Adding an optional boot argument forces the blade to abandon the regular boot order and forces a boot using the specified method. Sends a request to the blade PC to perform a graceful shutdown. The blade PC is then powered on. If no blade PC is in the specified bay, the user is told that the bay is empty. The optional boot arguments may require a firmware upgrade for the BIOS ROM of certain HP blade PCs. Adding an optional boot argument with force the blade to abandon the regular boot order and force a boot using the specified method. Sets the IPL for each subsequent reboot. This setting is only valid for present blades and is cleared if a blade is removed. This command may require a firmware upgrade of the BIOS. Allows for optional boot argument Allows for optional boot argument Only enclosure administrators may execute this command ENWW Functionality Exclusive to the Command Line Interface 87

98 Table 5-9 Functions Exclusive to the Command Line Interface Enclosure Management Commands (continued) Function Description Capability Exclusive to CLI SET BAY BOOT ONCE [HDD PXE RBSU] <bay number> {[, - ] <bay number>} SHOW BAY LIST [ALL <group name>] ADD IPMANAGER <IP address> Sets the boot device to be used on the next boot of the bay(s) specified. This setting is only valid on present blades and is cleared if the blade is removed. This command may require a firmware upgrade for the BIOS ROM of certain HP blade PCs. Displays the assigned to group, remote console user, and blade PC name for each bay in a particular group if a group name is specified or all bays if ALL is specified. Adds an IP address to the list of clients allowed to connect to Integrated Administrator. Only enclosure administrators may execute this command. The command line displays the remote console user. Only enclosure administrators may execute this command. DISABLE IPSECURITY Allows all clients to connect to Integrated Administrator. Only enclosure administrators may execute this command. ENABLE IPSECURITY REMOVE IPMANAGER <IP address> Restricts clients from being able to connect to Integrated Administrator. Removes the IP address from the list of clients allowed to connect to Integrated Administrator. Only enclosure administrators may execute this command. Only enclosure administrators may execute this command. SHOW NETWORK Displays the DHCP state, Dynamic DNS state, IP address, subnet mask, gateway address, primary and secondary DNS addresses, MAC address, HTTP and HTTPS server status, SNMP status, Secure Shell status, Telnet status, NTP status, NTP primary and secondary server address, NTP poll interval, NTP last update time, IP security configuration, AlertMail status, AlertMail mailbox, SMTP server address and sender domain of the enclosure. Only enclosure administrators may execute this command. SET ENCLOSURE SERIAL {NUMBER} <serial number> Allows modification of the serial number reported by the enclosure information. Only enclosure administrators may execute this command. The serial number may be 1 14 characters in length 88 Chapter 5 Command Line Interface ENWW

99 6 Setting Up the System This chapter explains the levels of user rights recognized by the Integrated Administrator and provides detailed procedures to configure the management functions provided by the Integrated Administrator. Customizing the enclosure settings Changing the Administrator password Modifying enclosure and rack names Modifying the asset tag number Modifying the date and time Enabling/Disabling Blade Auto-poweron Feature Setting up user accounts Adding a group Adding a user Enabling remote console sessions to blade PCs Setting up AlertMail Adding mailbox address Adding SMTP server address Adding Sender Domain Enabling AlertMail Disabling AlertMail Setting up IP Security Adding IP address Enabling IP Security Disabling IP Security Setting up Automatic Time Configuration (NTP) Adding primary NTP server Adding secondary NTP server ENWW 89

100 Setting the poll interval Enabling NTP Disabling NTP Configuring trap policy settings Configuring SNMP support Entering a community string Modifying the system location Modifying the system contact information Adding trap targets Removing trap targets Configuring SOAP Enabling SOAP Interface Enabling SAM Account For a detailed explanation of the command line conventions used in this document, see Command Line Conventions on page 141. These procedures are supported by the Web-based user interface and the CLI unless otherwise noted. NOTE: Most of these tasks are limited to a subset of users. For more information on who can perform each task, see User Permissionson page 90 and the section describing that task in this chapter. User Permissions The group-centered approach of Integrated Administrator to user permissions facilitates the maintenance of user groups and groups of blade PC bays. This approach operates according to the following principles: A blade PC bay is assigned exclusively to one group only. A group can be assigned many blade PC bays. A user can have various permission levels within any number of groups. Access to a blade PC by users or groups depends on the rights assigned to the blade PC bay in which the blade PC is installed. Use the following table to distinguish the various permission levels available from the HP PC Blade Enclosure Integrated Administrator. 90 Chapter 6 Setting Up the System ENWW

101 Table 6-1 HP PC Blade Enclosure Integrated Administrator Permissions Levels Title Account Type Permissions Description Enclosure Administrator Administrator View/Modify for all groups in the enclosure Enclosure administrators may maintain blade PC bay privileges, manage the enclosure, manage blade PC bays, and create and maintain groups. One special enclosure administrator account (named Administrator) cannot be deleted, disabled, or stripped of enclosure administrator permissions. No other enclosure administrator may change the password to this account. Enclosure administrators cannot disable or delete their own accounts. Group Administrator User View/Modify Group administrators may manage blade PC bay data for groups in which they are administrators. Group administrators may view blade PC bay data for groups in which they are members. Group administrators may modify their profile (not their privileges) and view enclosure data. Group member User View Group members may view blade PC bay data for groups in which they are members. Group member User Group member Group members may modify their profile (not their privileges) and view enclosure data. Customizing the Enclosure Settings NOTE: Only enclosure administrators may execute these commands. To change the default Administrator password using the Web-based user interface: 1. Click the Administration tab. 2. Click User List in the side panel. 3. Click the Administrator user name in the user list. 4. Click View/Modify User. The View/Modify User screen displays. 5. Click Change Password. 6. Type in the new Administrator password in the Password and Confirm password fields. 7. Click OK. To change the default Administrator password using the CLI, type: SET USER PASSWORD Administrator <new password> ENWW Customizing the Enclosure Settings 91

102 NOTE: The user name (Administrator) is case-sensitive. The <new password> must be 3-8 characters long and can include all printable characters. Modifying Enclosure and Rack Names To modify the enclosure name or rack name using the Web-based user interface: 1. Click the Enclosure tab. 2. Click Enclosure Information in the left panel. 3. Click the Enclosure Name field of the Status area. 4. Type the enclosure name. 5. Click the Rack Name field of the Status area. 6. Type the rack name. 7. Click Apply. 92 Chapter 6 Setting Up the System ENWW

103 To modify the enclosure name or rack name using the CLI, type the following commands sequentially: SET ENCLOSURE NAME <enclosure name> NOTE: The <enclosure name> must be 1-32 characters long and includes all alphanumeric, the dash, and the underscore characters. The default enclosure name is IA-XXXXXXXXXXXX where XXXXXXXXXXXX is replaced with the devices's physical MAC address: SET RACK NAME <rack name> NOTE: The <rack name> must be a maximum of 32 characters long and includes all alphanumeric, dash, and underscore characters. The default rack name is UnnamedRack. NOTE: The only way to completely clear the enclosure and/or rack names is with the SET FACTORY command Modifying the Asset Tag Number To modify the asset tag number using the Web-based user interface: 1. Click the Enclosure tab. 2. Click Enclosure Information in the left panel. 3. Scroll down to the General area. 4. Click the Asset Tag field. 5. Type the asset tag number. 6. Click Apply. ENWW Customizing the Enclosure Settings 93

104 To modify the asset tag number using the CLI, type: SET ENCLOSURE ASSET {TAG} <asset tag> NOTE: The <asset tag> must be 1-32 characters long and includes alphanumeric, dash, and underscore characters. The default enclosure asset tag is blank. Modifying the Date and Time To modify the date and time settings using the Web-based user interface: 1. Click the Enclosure tab. 2. Click Enclosure Information in the left panel. 3. Scroll down to the Date and Time area. 4. Select the proper time zone from the pull-down list. 5. Click the Date or Time field. 6. Type the date or time. 7. Click Apply. To modify the date and time settings using the CLI, type: SET DATE MMDDhhmm{{CC}YY} {TZ} 94 Chapter 6 Setting Up the System ENWW

105 where: MM: month DD: day hh: hour (24-hour time, an integer from 0-23) mm: minute CC: century YY: year TZ: timezone NOTE: If the time zone is left blank, the current time zone is left in effect. For a list of supported time zones, see Time Zone Settingson page 165. Setting Up User Accounts NOTE: Only enclosure administrators may perform this task. The Integrated Administrator enables you to manage blade PC bays and administer users by organizing those blade PC bays and users into groups. This approach enables enclosure administrators, for example, to re-assign user permissions to groups of blade PCs en masse, instead of requiring enclosure administrators to modify permissions one user at a time. Enclosure administrators assign users access rights to blade PC bays through the following tasks: Adding groups with access to specific blade PC bays in an enclosure Adding users with certain permissions within specific groups Adding a Group NOTE: Restricted default names of group and user accounts (Administrator, switch, switcha, switchb, and SAM) are not case-sensitive. Nondefault group and user names are case-sensitive. For more information on the Web-based user interface screens for this function, see Group List on page 48. For information on using the CLI, see User Account Commands on page 68. To create a group using the Web-based user interface: 1. Click the Administration tab. 2. Click Add Group in the left panel. 3. Type the group name and description in the fields. ENWW Setting Up User Accounts 95

106 4. Select bays for the group by selecting the appropriate check boxes. NOTE: If a blade PC bay is gray, that blade PC bay is inaccessible because it already belongs to another group. 96 Chapter 6 Setting Up the System ENWW

107 5. To add existing users to this group: a. Select users in the User Names area. b. Click Add User [View] or Add User [View/Modify]. For more information on permission levels, see User Permissions on page 90 in this chapter. 6. Click Apply. To create a group using the CLI, type the following commands sequentially: ADD GROUP <group name> NOTE: The <group name> must be unique to all other group names and user names and is casesensitive. It must be 1-13 characters long and can include all alphanumeric characters, the dash, and the underscore. SET GROUP {DESCRIPTION} <group name><description> NOTE: The <description> must be 1-20 characters long and can include all alphanumeric characters, the dash, the underscore, and spaces. ASSIGN BAY [ALL <bay number> {[, - ]<bay number>}] <group name> ASSIGN USER <user name> <group name> {[VIEW MODIFY]} NOTE: The <use name> and <group name> are case-sensitive. The Administrator account cannot be added to a group. The default setting is View. ENWW Setting Up User Accounts 97

108 Adding a User NOTE: Restricted default names of group and user accounts are not case-sensitive. Nondefault group and user names are case-sensitive. For information on permission levels, see User Permissions on page 90 in this chapter. To create a user using the Web-based user interface: 1. Click the Administration tab. 2. Click Add User in the left panel. 3. Type the user information in the appropriate field. For information on Account Type, see User Permissions on page 90 in this chapter. NOTE: The Account Type setting determines whether the account holder has management permissions. The optional Full Name and Contact Information fields provide the account holder s name and a readily accessible means of contact in case of emergency. 98 Chapter 6 Setting Up the System ENWW

109 4. To assign the user to an existing group: a. Select groups in the Group Names area. ENWW Setting Up User Accounts 99

110 b. Click Add User [View] or Add User [View/Modify]. For more information on permission levels, see User Permissions on page 90 in this chapter. 5. Click Apply. To add a user using the CLI, type the following commands sequentially: ADD USER <user name> {<password>} NOTE: The <user name> must be unique to all other user names and group names and is casesensitive. It must be 1-13 characters long and can include all alphanumeric characters, the dash, and the underscore. The <password> must be 3-8 characters long and includes all printable characters. ASSIGN ADMINISTRATOR {RIGHTS} <user name> SET USER FULLNAME {<user name>} <full name> NOTE: The <full name> must be 1-20 characters long and can include all alphanumeric characters, the dash, the underscore, and spaces. SET USER CONTACT {<user name>} <contact info> NOTE: The <contact info> must be 1-20 characters long and can include all alphanumeric characters, the dash, the underscore, and spaces. ASSIGN USER <user name> <group name> {[VIEW MODIFY]} 100 Chapter 6 Setting Up the System ENWW

111 Enabling Remote Console Sessions to Blade PCs The remote console feature of the Integrated Administrator enables a user to connect to the console (serial) connector of the blade PC in order to access the ROM-Based Setup Utility (RBSU). Accessing the RBSU of the blade PC requires nothing more than connecting to the blade PC. Setting Up AlertMail AlertMail enables users to receive system events by instead of using SNMP traps. AlertMail is completely independent from SNMP and both can be enabled at the same time. AlertMail uses standard SMTP commands to communicate with an SMTP capable mail server. To set up AlertMail using the Web-based user interface: 1. Click the Enclosure tab. 2. Click Network Administration in the left panel. 3. Scroll down to the Alertmail Configuration area. 4. Click the Enabled button. 5. Type the address in the Address field. 6. Type the sender domain in the Sender Domain field. 7. Type the SMTP server address in the SMTP Server fields. 8. Click Apply. Table 6-2 AlertMail CLI Commands Function Add an address using command line interface Add an SMTP server address Command SET ALERTMAIL MAILBOX < address> SET ALERTMAIL SMTPSERVER <IP address> Set the sender domain SET ALERTMAIL SENDERDOMAIN <domain name> Enable Alertmail Disable Alertmail ENABLE ALERTMAIL DISABLE ALERTMAIL * For security reasons, some SMTP servers will only forward mail if the sender s domain is set properly. You may need to set this parameter to match the network domain. ENWW Enabling Remote Console Sessions to Blade PCs 101

112 Alerts AlertMail, if enabled, will send out alerts by for the following events: Enclosure boot message IA reboot message Fan status change Fan inserted Fan removed Enclosure thermal status change Power supply status change Power supply inserted Power supply removed Power subsystem redundancy change Blade inserted Blade removed Blade status change Blade thermal change Blade fault Blade diagnostic string (bc2x00 only) (See Error Messages on page 142 for a list of blade specific diagnostic strings.) NOTE: If the enclosure has a switch installed, it can take up to 60 seconds before the system will send out an AlertMail after a system boot up. Events generated within this period of time will be sent out when the switch has come online. All s have the following header: Subject: HP AlertMail-SEQ: <SEVERITY> SUBJECT Date: Date in standard format From: Enclosure ENCLOSURE-NAME <enclosure-name@domain> To: RECEIVER MAILBOX Where SEVERITY is one of the following (from highest to lowest): # CRITICAL # WARNING # NOTICE # INFO Example Chapter 6 Setting Up the System ENWW

113 ----SAMPLE START---- Subject: HP AlertMail-010: (CRITICAL) Power Supply #1: Failed Date: Wed, 23 Apr :02: From: Enclosure IA-00508BEBA571 To: X-OS: HP Integrated Administrator X-Priority: 1 Content-Type: text/plain; charset=us-ascii EVENT (26 May 07:09): Power Supply #1 Status has changed to: Failed Enclosure, IA-00508BEBA571, has detected that a power supply in bay 1 has changed from status OK to Failed. The power supply should be replaced with the appropriate spare part. You can ensure that the center wall assembly is operating correctly by swapping the two power supplies. Make sure that there are no bent pins on the power supply connectors before reinserting and that each power supply is fully seated. An amber LED on the power supply indicates either an over-voltage, overtemperature, or loss of AC power event has occurred. A blinking LED on the power supply indicates a current limit condition. Enclosure Status: Degraded Enclosure Management URL: < - PLEASE DO NOT REPLY TO THIS ----SAMPLE END---- Setting Up IP Security NOTE: This is not IPSec. IP security allows an administrator to define a set of IP addresses that are the only ones allowed to connect to the services provided (SSH, HTTP, TELNET, SNMP). This means that an administrator can make sure only a certain set of machines have access to Integrated Administrator. You can enter a maximum of five IP addresses. Table 6-3 IP Security Commands Function Add an IP address Remove an IP address Enable IP security Disable IP security Command ADD IPMANAGER <IP address> REMOVE IPMANAGER <IP address> ENABLE IPSECURITY DISABLE IPSECURITY ENWW Setting Up IP Security 103

114 Setting Up Automatic Network Time Protocol Configuration (NTP) Automatic time configuration allows the Integrated Administrator to synchronize its date and time with an NTP-capable device supporting the NTP. To set up NTP using the Web-based user interface: 1. Click the Enclosure tab. 2. Click Network Administration in the left panel. 3. Scroll down to the NTP Configuration area. 4. Click the Enabled button. 5. Type the server addresses in the Primary Server and Secondary Server fields. 6. Type the poll interval in the Poll Interval field. 7. Click Apply. Table 6-4 Automatic Time Configuration CLI Commands Function Set the NTPpoll interval* Command SET NTP POLL <seconds> Set the primary NTP server SET NTP PRIMARY <IP address> Set the secondary NTP server Disable the secondary NTP server Enable NTP Disable NTP SET NTP SECONDARY <IP address> SET NTP SECONDARY NONE ENABLE NTP DISABLE NTP * If an NTP poll interval is not set, it will default to 720 seconds. The minimum time is 60 seconds and the maximum time is 9999 seconds. 104 Chapter 6 Setting Up the System ENWW

115 Configuring SNMP Support NOTE: Only enclosure administrators may execute these tasks. Entering a Community String To enter a read community or write community string using the Web-based user interface: 1. Click the Enclosure tab. 2. Click SNMP Configuration in the left panel. 3. Click the Read Community or Write Community field. 4. Type the string. NOTE: Entering a blank string into the Read Community field sets the Read Community to public. Entering a blank string into the Write Community field disables the SNMP set commands. 5. Click Apply. To enter a read community or write community string using the CLI, type: SET SNMP COMMUNITY [READ WRITE] <community name> ENWW Configuring SNMP Support 105

116 The write <community name> must be 1-20 characters long and the read <community name> must be 1-20 characters long. Both community names support all alphanumeric characters, the underscore, and the dash characters. The default read community name is public, and the default write community name is blank. Modifying the System Location NOTE: The SNMP protocol can be disabled in the Network Configuration area of the Web-based user interface. To modify the system location information using the Web-based user interface: 1. Click the Enclosure tab. 2. Click SNMP Configuration in the left panel. 3. Set the cursor in the System Location field and type the appropriate information. 4. Click Apply. To modify the system location information using the CLI, type: SET SNMP LOCATION <location> The <location> must be 1 20 characters in length. Acceptable characters include alphanumeric, dash, sign, and spaces. You must use double quotes around the contact if it includes spaces NOTE: The only way to clear the <location> is with the SET FACTORY command Modifying the System Contact Information To modify the system contact information using the Web-based user interface: 1. Click the Enclosure tab. 2. Click SNMP Configuration in the left panel. 3. Set the cursor in the System Contact field and type the appropriate information. 4. Click Apply. To modify the system contact information using the CLI, type: SET SNMP CONTACT <contact> The <contact> field must be 1-20 characters long and supports all the alphanumeric characters, the underscore, the dash, and spaces with quotes. NOTE: The only way to clear the <contact> information is with the SET FACTORY command. Adding Trap Targets To add a trap target using the Web-based user interface: 1. Click the Enclosure tab. 2. Click SNMP Configuration in the left panel. 106 Chapter 6 Setting Up the System ENWW

117 3. Type the IP address in the appropriate field of the SNMP area. 4. Click Add. 5. Click Apply. To add a trap target using the CLI, type: ADD SNMP TRAPRECEIVER <IP address> The <IP address> must be in the form ###.###.###.###, where ### ranges from 0 to 255. The Integrated Administrator only supports v1 traps and directs the traps to SNMP port 162 by default. You can add a maximum of eight IP addresses to receive SNMP traps. Removing Trap Targets To remove a trap target list using the Web-based user interface: 1. Click the Enclosure tab. 2. Click SNMP Configuration in the left panel. 3. Type the list name in the appropriate field of the SNMP area. 4. Click Remove. 5. Click Apply. To add or remove a trap target list using the CLI, type: REMOVE SNMP TRAPRECEIVER <IP address> The <IP address> must be in the form ###.###.###.###, where ### ranges from 0 to 255. Modifying Trap Policy To modify trap policy using the CLI: For enclosure: SET TRAP POLICY ENCLOSURE [ALL CRITICAL MAJOR MINOR INFORMATIONAL] [ON OFF] For bay: SET TRAP POLICY BAY [ALL CRITICAL MAJOR MINOR INFORMATIONAL] [ON OFF] For a specific trap number: SET TRAP POLICY TRAP [TRAP # {optional range}] For traps and further information, see Supported SNMP Traps on page 172. ENWW Configuring SNMP Support 107

118 7 Configuring SOAP Support Tasks Enabling SOAP Interface To enable the SOAP interface via the Web-based user interface: 1. Click the Enclosure tab. 2. Click Network Configuration in the left panel. 3. Click the SOAP button to Enable 4. Click Apply. To enable the SOAP interface via the CLI-based user interface, type: ENABLE SOAP Disabling SOAP Interface To disable the SOAP interface via the Web-based user interface: 1. Click the Enclosure tab. 2. Click Network Configuration in the left panel. 3. Click the SOAP button to Disable 4. Click Apply. To disable the SOAP interface via the CLI-based user interface, type: DISABLE SOAP 108 Chapter 7 Configuring SOAP Support Tasks ENWW

119 Supported SOAP Interface Commands The following table contains a summary of the supported SOAP interface commands a short description: Table 7-1 Supported SOAP Interface Commands Command userlogin userlogout modifypassword getenclosurepowercollectioninfo setenclosurepowercollectioninfo getenclosurepowerrecords getbladepowercollectioninfo setbladepowercollectioninfo getbladepowerrecords getenclosureinfo getiainfo getenclosurestatus setbladepowerstate getbladepowerstate getbladestatus getbladestatusarray getbladeinfo getenclosurepowerdata SetBladeOneTimeBoot SetBladeIPLBootPriority flashiarom getbladebootinfo setbladeuid setenclosureuid Description Establishes a SOAP session with the IA for using SOAP interface Web services. userlogout Closes a SOAP session with the IA. Change user account password via SOAP interface. Gets information about the power regulator and power reporting capabilities of the enclosure. Sets information about the power regulator and power reporting capabilities of the enclosure. Allows setting of a 1 minute, 5 minute, 10 minute, 1 hour, or for 24 hour sample rate. Returns collected power history data points for the enclosure. Gets information about the power regulator and power reporting capabilities of a given bay. Sets information about the power regulator and power reporting capabilities of a given bay. Allows setting of a 1 minute, 5 minute, 10 minute, 1 hour, or for 24 hour sample rate. Returns collected power history data points for the a given bay. Functions like CLI Get Enclosure Info command minus some IA specific information. Gets IA specific information. Functions like CLI Get Enclosure Status command. Functions like CLI power[on / off] {bay #} command. Gets the power state of the blade. Functions like CLI Get Blade Status {bay #} command. Functions like CLI Get Blade Status All command. Functions like CLI Get Blade Info {bay #} command. Provides a snapshot of the most recent power data points collected. Changes boot order for the blade on next POST. Functions like CLI command SET BAY BOOT ONCE. Changes boot order for the blade on next POST. Functions like CLI command SET BAY BOOT ALWAYS. Can flash the IA via the SOAP interface but only with Administrator account. Returns pending boot order settings for blade as set by the IA. Changes the UID LED on the blade. Changes the UID LED on the enclosure. You can download the WDSL file for XML schema and description for these commands directly from the Integrated Administrator by entering this URL: IP address>/iasoap.wsdl, where <IA IP address> is the IP address of the Integrated Administrator. ENWW Supported SOAP Interface Commands 109

120 8 Performing Common Administrative Tasks This chapter explains the following Integrated Administrator management functionalities: Managing blade PC bays Opening a remote console session to a blade PC Accessing ROM-Based Setup Utility for a blade PC Reviewing the activity for a blade PC Powering off the blade PC CAUTION: The Integrated Administrator cannot gracefully shutdown a blade PC unless the blade is using an ACPI-supported OS. Identifying a blade PC using the Unit Identification LED Managing the enclosure Reviewing the activity for the enclosure Identifying the enclosure using the Unit Identification LED Generating an enclosure summary Identifying problem components Managing users Modifying a user s rights to blade PC bays Disabling and deleting user accounts Managing Blade PC Bays Opening a Remote Console Session to a Blade PC NOTE: Enclosure administrators and group administrators with access to the bay can click the Remote Console button to open a remote text-based console to the blade PC in the bay. 110 Chapter 8 Performing Common Administrative Tasks ENWW

121 To access the remote console using the Web-based user interface: 1. Click the Bays tab. 2. Click Bay List in the left panel. 3. Select the blade PC from the blade list. NOTE: The blade PC name is listed in the column titled Blade Name. When a blade PC is highlighted, the Bay Information buttons become active. 4. Click Remote Console. The Remote Console screen displays. 5. Click Remote Console to open a new window that enables you to connect to the blade PC terminal interface. To access the remote console using the CLI, type: CONNECT BAY <bay number> NOTE: A blade PC can only support one remote console session at a time. Accessing the ROM-Based Setup Utility for a blade PC NOTE: Enclosure administrators and group administrators with access to the bay can select the Remote Console button to open a remote text-based console to the blade PC in the bay. ENWW Managing Blade PC Bays 111

122 To access the ROM-Based Setup Utility (RBSU) for a blade PC using the Web-based user interface: 1. Click the Bays tab. 2. Click Bay List in the left panel. 3. Select the bay from the bay list. 4. Click Remote Console at the bottom of the screen. 5. Click Remote Console from the Remote Console screen. 6. If the blade PC is running the Windows 2000 operating system: a. Return to the Web-based user interface and click Virtual Buttons in the left panel. CAUTION: a blade PC. Without the blade PC health driver, the Integrated Administrator cannot reboot b. If the blade PC is off, select Power On at the bottom of the screen; otherwise, select Reboot at the bottom of the screen. c. Click Apply and return to the remote console session. 7. When prompted, press F10 for ROM-Based Setup Utility: a. Press Esc. b. Press the 0 key. 8. To exit RBSU: a. Press Esc. b. When prompted, press F10, press the Esc key and the 0 key to confirm. 9. To close the remote console session: a. Press the Ctrl+Shift+_ keys. b. Press the D key. To access the RBSU for a blade PC using the command line interface: CAUTION: Without the blade PC health driver, the Integrated Administrator cannot reboot a blade PC. 1. If the blade PC is running the Windows 2000 operating system, reboot the blade PC by entering the following commands sequentially: REBOOT BAY <bay number> Yes 2. Connect to the blade PC by observing its bay number and typing: CONNECT BAY <bay number> 3. When prompted, press the F10 key for ROM-Based Setup Utility for Blade PCs: a. Press Esc. b. Press the 0 key. 112 Chapter 8 Performing Common Administrative Tasks ENWW

123 4. To exit RBSU: a. Press Esc. b. When prompted, press F10, press the Esc key and the 0 key to confirm. 5. To close the remote console session: a. Press the Ctrl+Shift+_ keys. b. Press the D key. Reviewing Activity for a Blade PC NOTE: This task can only be performed for a given blade PC bay by enclosure administrators, group administrators, and group members with access rights to the blade PC bay. To access the console log for a blade PC using the Web-based user interface: 1. Click the Bays tab. 2. Click Bay List in the left panel. 3. Choose the bay from the Bay list. 4. Click Console Log under Bay Information. To view the system log for a blade PC using the CLI, type: SHOW SYSLOG BAY <bay number> NOTE: Typing q quits the command. Typing any other key shows the next screen if more information is available to display. The system log of the blade PC is not stored between reboots, so the information only includes what has taken place since the last power-on of the Integrated Administrator. Powering Off the Blade PC CAUTION: Without the blade PC health driver or an ACPI-compliant operating system, the Integrated Administrator cannot gracefully shutdown a blade PC. This condition may result in the permanent loss of critical data. Rebooting or powering off the blade PC removes all power from the blade PC and ends all open sessions. NOTE: This task can only be performed for a given blade PC bay by enclosure administrators and group administrators with access rights to the blade PC bay. To reboot or power off the blade PC using the Web-based user interface: 1. Click the Bays tab. 2. Click Bay List in the left panel. 3. Click the blade PC whose power state to modify. 4. Click Virtual Buttons at the bottom of the screen. ENWW Managing Blade PC Bays 113

124 5. Click Reboot, Power Off or Power Off Immediately. 6. Click Apply. When the blade PC power is off, the Power Off button text becomes Power On. To reboot the blade PC using the CLI, type: REBOOT BAY <bay number> {[, - ] <bay number>} {FORCE} {[PXE HDD RBSU]} NOTE: This command sends a request to the blade PC in a given bay to perform a graceful shutdown and then reboots the blade PC. To power off the blade PC (immediately or otherwise) using the CLI, type: POWEROFF BAY <bay number> {[, - ] <bay number>} {FORCE} NOTE: If the FORCE argument is invoked, the blade PC powers down immediately and could lose data or become unstable. Identifying a Blade PC Using the Unit Identification LED NOTE: You can perform this task only for a given blade PC bay by enclosure administrators and group administrators with access rights to the blade PC bay. The virtual button for the Unit Identification LED of the blade PC physically changes the state of the Unit Identification LED on the front panel of the blade PC from off to on, or vice-versa. The Unit Identification LED illuminates bright blue and is designed to help a technician quickly identify a specific blade PC in the data center. 114 Chapter 8 Performing Common Administrative Tasks ENWW

125 To change the state of a Unit Identification LED of for a blade PC using the Web-based user interface: 1. Click the Bays tab. 2. Click Bay List in the left panel. 3. Click the blade PC whose Unit Identification LED you wish to toggle. 4. Click Virtual Buttons at the bottom of the screen. 5. Click Toggle ON or Toggle OFF depending on the current state of the Unit Identification LED for the blade PC. To change the state of the Unit Identification LED for a blade PC using the CLI, type: SET BAY UID <bay number> {[, - ] <bay number>} [ON OFF] ENWW Managing Blade PC Bays 115

126 Managing the Enclosure Reviewing the Activity of the Enclosure The system log of the Integrated Administrator is a chronology of system activities, such as user logins, enclosure shutdowns, and system failures. The system log also displays warnings and errors that occur in the HP PC Blade Enclosure, including: User account modifications Group modifications Bay assignment modifications Valid and invalid login attempts System failures System status changes Blade insertion and removals DHCP, Dynamic DNS, and WINS messages Updates to the Integrated Administrator s firmware Bay health status changes Bay power state changes Enclosure administrators can view events in the enclosure by accessing the System Log. Additionally, administrators can filter the severity of events that are recorded in the system log using the system log policies. This is useful for tracking specific bay vs. enclosure event classes for diagnostic purposes. In contrast to the Event List, no other users can access the System Log. For more information on how the Event List differs from the System Log, see Identifying Problem Components on page 120 in this chapter. To view the System Log using the Web-based user interface: 1. Click the Enclosure tab. 116 Chapter 8 Performing Common Administrative Tasks ENWW

127 2. Click System Log in the left panel. 3. To update the System Log, click Refresh. 4. To clear the System Log, click Clear Log. The Integrated Administrator prompts you to confirm this decision. To view the System Log of the enclosure using the CLI, type: SHOW SYSLOG ENCLOSURE Only enclosure administrators can execute this command. To view the System Log Policies of the enclosure using the CLI, type: SHOW SYSLOG POLICIES Only enclosure administrators can execute this command. To set the System Log Policies of the enclosure using the CLI, type: SET SYSLOG POLICY ENCLOSURE {ALL, MAJOR, MINOR, NORMAL, INFORMATIONAL} [ ON OFF ] for enabling / disabling enclosure system log message types. SET SYSLOG POLICY BAY {ALL, MAJOR, MINOR, NORMAL, INFORMATIONAL} [ ON OFF ] for enabling / disabling bay system log message types. Only enclosure administrators can execute this command. See Error Messages on page 142 for a list of maskable system log messages and their severity classification. ENWW Managing the Enclosure 117

128 Identifying the Enclosure Using the Unit Identification LED The virtual button for the Unit Identification LED of an enclosure physically changes the state of the Unit Identification LED on the rear panel of the enclosure from Off to On, or vice versa. The Unit Identification LED illuminates bright blue and is designed to help a technician quickly identify a specific enclosure in the data center. To change the state of the Unit Identification LED of the enclosure using the Web-based user interface: 1. Click the Enclosure tab. 2. Click Virtual Buttons in the left panel. 3. Click Toggle ON or Toggle OFF depending on the current state of the Unit Identification LED for the enclosure. To change the state of the Unit Identification LED for the enclosure using the CLI, type: SET ENCLOSURE UID [ON OFF] Only enclosure administrators may execute this command. 118 Chapter 8 Performing Common Administrative Tasks ENWW

129 Generating an Enclosure Summary You can generate a printable synopsis of all the data for the enclosure including the enclosure name and type; the part, serial, and asset tag numbers of the enclosure; the software and hardware versions of the Integrated Administrator; the MAC address of the Integrated Administrator; and the type, part number, and serial number of the interconnect tray. To generate a printable synopsis of all the data for the enclosure using the Web-based user interface, click Summary View in the top panel. The Web-based user interface opens a new window that you can copy and paste into a printable file. To obtain the enclosure information using the CLI, enter the following commands as needed: SHOW ENCLOSURE FAN [<fan number> ALL] This command displays the status, redundancy, partner, speed, and part number for one or all fans in the enclosure. SHOW ENCLOSURE INFO This command displays the enclosure name and enclosure type; the software and hardware version of the Integrated Administrator; the part number, serial number, and asset tag number of the enclosure; the MAC address of the Integrated Administrator; and the type, part number, and serial number of the interconnect tray. SHOW ENCLOSURE POWERSUPPLY [<power supply number> ALL] ENWW Managing the Enclosure 119

130 This command displays the status, AC input status, capacity, input voltage range #1 (Volts), input voltage range #2 (Volts), input frequency range (Hz), part number, serial number, and hardware revision for one or all power supplies in the enclosure. SHOW ENCLOSURE STATUS This command displays the status of enclosure health, Integrated Administrator health, and the Unit Identification LED under the heading enclosure status, and displays the status and capacity of the power supplies of the enclosure under the heading power status. SHOW ENCLOSURE TEMP This command displays the location, status (OK, warm, degraded, or failed), and temperature (degrees Fahrenheit and Celsius) for all the temperature sensors of the enclosure. Identifying Problem Components The Integrated Administrator alerts you to problem conditions or failed components in the enclosure, such as: A fan A power supply A blade PC Over-temperature conditions If the enclosure enters a degraded state at any time, the Web-based user interface of the Integrated Administrator alerts the user with icons along the top of the deck panel. 120 Chapter 8 Performing Common Administrative Tasks ENWW

131 Identify the degraded components in the enclosure and their respective part numbers in the following ways: Opening the enclosure system log Opening the event list - the event list differs from the system log in the following ways: Any user can view the event list. Only enclosure administrators can access the system log. The messages in the event list are limited to cautions and critical failures. Refer to the enclosure system log for information on fixes. The event list only displays messages received since the user logged into the Integrated Administrator. The system log displays every message generated by the enclosure diagnostics. Clicking on the Caution or Critical icon along the top of the deck panel This action opens the event list. By highlighting an item in the event list and clicking View Event Details, you can access the area within the Integrated Administrator that provides detailed information about that degraded component. NOTE: As soon as you click the Caution or Critical icon, that icon disappears whether the degraded conditions are corrected or not. To identify a degraded component using the System Log from the Web-based user interface: 1. Click on the Enclosure tab. ENWW Managing the Enclosure 121

132 2. Click on System Log in the left panel. 3. Go to the appropriate area in the Integrated Administrator for the spare number of the degraded component. 122 Chapter 8 Performing Common Administrative Tasks ENWW

133 To identify a degraded component using the event list from the Web-based user interface: 1. Click the Event List tab. 2. Click the degraded item in the event list. 3. Click View Event Details at the bottom of the screen. This action opens the page in the Integrated Administrator that displays information about the degraded component. To identify a degraded component using the Caution or Critical icons along the top of the deck panel from the Web-based user interface, click an icon. This action opens the event list. By highlighting an item in the event list and clicking View Event Details, you can access the area within the Integrated Administrator that provides detailed information about that degraded component. ENWW Managing the Enclosure 123

134 To identify a degraded component using the CLI: 1. Type: SET DISPLAY EVENTS [BAY ENCLOSURE ON OFF] to ON. 2. Type: SET DISPLAY EVENTS ENCLOSURE ALL ON. 3. Type: SET DISPLAY EVENTS BAY ALL ON. 4. Type the appropriate commands: SHOW ENCLOSURE FAN [<fan number> ALL] This command displays the status, redundancy, partner, speed, and part number for one or all fans in the enclosure. SHOW ENCLOSURE INFO This command displays the enclosure name, type, part number, serial number, and asset tag number; the Integrated Administrator software and hardware version; the MAC address of the Integrated Administrator, and the interconnect tray type, part number, and serial number. SHOW ENCLOSURE POWERSUPPLY [<power supply number> ALL] This command displays the status, AC input status, capacity, input voltage range #1 (Volts), input voltage range #2 (Volts), input frequency range (Hz), part number, serial number, and hardware revision for one or both power supplies in the enclosure. SHOW ENCLOSURE STATUS 124 Chapter 8 Performing Common Administrative Tasks ENWW

135 This command displays the status of enclosure health, Integrated Administrator health, and the Unit Identification LED under the heading enclosure status, and displays the status and capacity of the power supplies of the enclosure under the heading power status. SHOW ENCLOSURE TEMP This command displays the location, status (OK, warm, degraded, or failed), and temperature (degrees Fahrenheit or Celsius) for all the temperature sensors of the enclosure. Managing Users NOTE: Only enclosure administrators may perform these tasks. Restricted default names of group and user accounts (Administrator, switch, switcha, switchb, and SAM) are not case-sensitive. Nondefault group and user names are case-sensitive. Modifying a User s Rights to Blade PC Bays You can only modify a user s rights to blade PC bays by modifying their group rights, specifically by choosing one of the following methods: Creating a new group for the user with the updated access rights to the blade PC bays Modifying the rights to blade PC bays for a group to which the user has membership Creating a New Group with the Updated Access Rights To create a new group with the updated blade PC access profile you wish to assign your user, see Adding a Group on page 95. Modifying Group Rights to Blade PC Bays To modify group rights to blade PC bays using the Web-based user interface: 1. Click the Administration tab. ENWW Managing Users 125

136 2. Click Group List in the left panel. 3. Click on the group whose rights you wish to modify. 126 Chapter 8 Performing Common Administrative Tasks ENWW

137 4. Click View/Modify Group. 5. Select the appropriate check boxes for the available blade PC bays that reflects the updated rights you wish to give the group. 6. Click Apply. To modify rights to blade PC bays for an existing group using the CLI, choose from among the following commands: NOTE: Only enclosure administrators may execute these commands. To expand the number of blade PCs assigned to a group, type: ASSIGN BAY [ALL <bay number> {[, - ]<bay number>}] <group name> If a blade PC bay is currently assigned to a group, this command re-assigns the bay from its current group to the new group. To remove access rights to blade PC bays for any group, type: UNASSIGN BAY [ALL <bay number> {[, - ] <bay number>}] Disabling and Deleting User Accounts NOTE: Only enclosure administrators may execute this command. Group accounts can be deleted, but cannot be disabled. To disable a user account using the Web-based user interface: ENWW Managing Users 127

138 1. Click the Administration tab. 2. Click on User List in the left panel. 3. Select the user whose account you wish to disable from the user list. 4. Click View/Modify User. 5. Set the account status to Disabled. 6. Click Apply. To disable a user account using the CLI, type: DISABLE USER <user name> When this command is executed, the user is immediately logged out of the system and prevented from logging in until the account is enabled. Deleting a User Account To delete a user account using the Web-based user interface: 1. Click the Administration tab. 2. Click User List in the left panel. 128 Chapter 8 Performing Common Administrative Tasks ENWW

139 3. Select the user account you wish to delete from the user list. 4. Click Remove User. To delete a user account using the CLI, type: REMOVE USER [ALL <user name>] If ALL is specified, the command deletes all the user accounts except the Administrator account. The Administrator account cannot be removed. Deleting Group Accounts To delete a group account using the Web-based user interface: 1. Click the Administration tab. 2. Click Group List in the left panel. ENWW Managing Users 129

140 3. Select the group from the group list. 4. Click Remove Group. To delete a group account using the CLI, type: REMOVE GROUP [ALL <group name>] If ALL is specified, the command deletes all the group accounts. 130 Chapter 8 Performing Common Administrative Tasks ENWW

141 9 Performing Advanced Functions This chapter provides an explanation of the following advanced tasks you can perform using the Integrated Administrator. These procedures are supported by the Web-based user interface and the CLI unless otherwise noted: Replicating the configuration of the Integrated Administrator Administering security certificates Creating a security certificate Downloading a security certificate Key-Based SSH Authentication Configuring a Blade PC Boot Order Powering off the enclosure Disabling network protocols to the Integrated Administrator Upgrading the firmware of the Integrated Administrator Recovering a lost Administrator password Launching flash disaster recovery NOTE: Only enclosure administrators may perform the tasks in this chapter. ENWW 131

142 Replicating the Configuration of the Integrated Administrator NOTE: The Integrated Administrator does not support this task using the Web-based user interface. To set up several enclosures with the same configuration, configure one enclosure (such as add all user accounts, add all groups, and assign bays) and then replicate that configuration on the other enclosures. To replicate the configuration of the Integrated Administrator using the CLI: 1. Login as Administrator on the first enclosure. 2. Type: UPLOAD CONFIG <url>. This command uploads the current runtime configuration to the specified TFTP or FTP server. If your FTP server does not allow anonymous uploading, specify an FTP username and password using the syntax: 3. Edit the uploaded configuration file using a text editor to customize the configuration (such as user names, passwords, and network settings) for the other enclosures. NOTE: Step 4 only applies if the other enclosures have been configured previously. For security reasons, passwords are never replicated in the configuration file. 4. Restore the factory defaults on each of the other enclosures to clear any previous configuration: a. Login as Administrator on an enclosure to which you intend to replicate the configuration. b. Type: SET FACTORY. This command sets the Integrated Administrator back to its factory default settings and clears credentials such as the SSH fingerprint, although the password of the Administrator account does not change. The Integrated Administrator is restarted after all the changes are implemented. IMPORTANT: Only the Administrator account may execute this command. 5. Download the configuration to each of the other enclosures: a. Log in as Administrator on an enclosure to which you intend to replicate the configuration. b. Type: DOWNLOAD CONFIG <url>. The Integrated Administrator does not check the configuration file for errors, but auto-executes the file in script mode. The file is not allowed to change the password of the Administrator account. Supported protocols are http, ftp, and tftp. Format the URL as protocol://host/path/file. If your ftp server does not support anonymous connections, specify a user name and password by replacing the host part in the above format with username:password@host. NOTE: file. Step c applies only if you did not set user account passwords in the configuration c. Set the password for each user account. For commands, see User Account Commands on page 68. Administering Security Certificates NOTE: The Integrated Administrator does not support these tasks using the Web-based user interface. 132 Chapter 9 Performing Advanced Functions ENWW

143 Creating a Certificate Request To create a security certificate using the CLI, type: GENERATE CERTIFICATE REQUEST This command generates a PKCS#10 certificate request. This certificate request can be sent to your certification authority (CA) to obtain a PKCS#7 certificate file to use below. To create a self-signed security certificate using the CLI, type: GENERATE CERTIFICATE SELFSIGNED This command generates a self-signed PKCS#7 certificate to replace the existing SSL certificate. This certificate is signed with the current name of the enclosure and will be valid for 10 years. Users who do not have a certificate authority (CA) may use this certificate as a replacement. Downloading a Security Certificate To download a security certificate using the CLI, type: DOWNLOAD CERTIFICATE <url> This command downloads a CA supplied PKCS#7 file to replace the current security certificate on the system. Supported protocols are http, ftp, and tftp. Format the URL as: protocol://host/path/file If your ftp server does not support anonymous connections, you can specify a username and password by replacing the host part in the previous format: username:password@host Key-Based SSH Authentication Users may install their own public SSH keys for password-less logins to the Integrated Administrators. Only enclosure administrators can use key-based authentication. The CLI features four commands to install and manage the authorized SSH keys. To view any current installed authorized SSH keys, type: SHOW SSHKEY This command shows any keys currently installed on the Integrated Administrator that are authorized to log in using an enclosure administrator account. To view the fingerprint of the Integrated Administrator host key, type: SHOW SSHFINGERPRINT This command shows the fingerprint of the host key for the Integrated Administrators. Users may compare this fingerprint with the fingerprint displayed by their SSH client when connecting to the Integrated Administrators to guarantee the authenticity of the Integrated Administrator connection. Users who need guaranteed authenticity will want to use the Integrated Administrator serial console to obtain the SSH fingerprint for the first time. To clear any currently installed authorized SSH keys, type: CLEAR SSHKEY This command clears any authorized keys currently installed on the Integrated Administrator that are authorized to log in. After this command has been issued, all users have to enter a valid password in order to log in. To download and install one or more SSH keys, type: DOWNLOAD SSHKEY <url> ENWW Key-Based SSH Authentication 133

144 This command downloads and install a file containing one or more SSH keys which are authorized to log into the Integrated Administrator. The new file will replace any existing keys. Supported protocols are http, ftp and tftp. Format the URL as: protocol://host/path/file. If your ftp server does not support anonymous logins, you can specify a username and password by replacing the host part (in previous format) with: username:password@host. The Integrated Administrator supports multiple SSH keys in one downloaded file. Max file size for SSH keys is 16K. Key-based SSH logins have an advantage for use with scripting as well. Remote commands can be sent to any Integrated Administrator after installing the appropriate authorized key without having to enter a password between each command. Using the OpenSSH package, the user can send commands using the following syntax: ssh user@host command You can group together commands to perform a series of actions. To view the health status of the enclosure and all blades with a single command, type: ssh user@host SHOW ENCLOSURE STATUS; SHOW STATUS BAY ALL By having an authorized key file installed on the Integrated Administrator, the user can combine these without having to enter a password between each command sent to the Integrated Administrator. Configuring Blade PC Boot Order Enclosure and group administrators may change the boot order, sometimes referred to as Initial Program Load (IPL), of their blade PCs by using the CLI of the Integrated Administrator. The change can be made permanently or only for the next reboot. Several commands are available in the CLI to control the blades in this manner. To set a blade PC boot order, type: SET BAY BOOT FIRST [HDD PXE] [ALL <bay number> {[, -] <bay number>}] During the next reboot, this will set the specified blade PC boot order to use the given boot device first. This has the same effect as changing the Standard Boot Order (IPL) setting in the RBSU on the blade PC. To set a blade PC boot order for the next boot only, type: SET BAY BOOT [ONCE ALWAYS] [HDD PXE RBSU] [ALL <bay number> {[, -] <bay number>}] This will force the specified blade PC to boot to the specified media on the next boot only. The RBSU setting will make the blade PC(s) boot into the RBSU which can be viewed with the Remote Console functionality. The HDD setting forces the blade PC to boot from the hard drive first, and the PXE setting forces it to boot from the integrated NIC first. To reset blade boot order settings which have not yet taken effect, type: CLEAR BAY BOOT [FIRST ONCE ALWAYS] [ALL <bay number> {[, -] <bay number>}] This will clear changes to the specified blade PC boot order that were made with the SET BAY BOOT command. It only affects pending changes so if the blade PC has been rebooted since the SET BAY BOOT command, this command will have no effect. 134 Chapter 9 Performing Advanced Functions ENWW

145 The POWERON BAY and REBOOT BAY commands have been extended to allow an argument which sets blade PC boot order for that boot only. These settings are the same as the SET BAY BOOT ONCE command. To determine if any boot order changes are pending for a specific blade, use the SHOW BAY INFO command. The Pending Boot Order status line will show any pending changes to the boot order, either one-time or permanent. Powering Off the Enclosure CAUTION: Powering off the enclosure removes all power from the blade PCs and ends all open sessions. After powering off the enclosure, you can only power on the enclosure if you have physical access to the enclosure. To power off the enclosure using the Web-based user interface: 1. Click the Enclosure tab. 2. Click Virtual Buttons. 3. Click Power Off. 4. Click Apply. ENWW Powering Off the Enclosure 135

146 To power off the enclosure using the CLI, type: POWEROFF ENCLOSURE This command attempts to perform a graceful shutdown of the enclosure by powering off each blade PC and then powering off the enclosure. After 5 minutes, the command powers down all components of the system immediately if they are not already powered off. CAUTION: Without the blade PC health driver or an ACPI-compliant operating system, the Integrated Administrator cannot gracefully shutdown a blade PC. This condition may result in the permanent loss of critical data. Disabling Network Protocols To modify the supported communications protocols of the enclosure using the Web-based user interface: 1. Click the Enclosure tab. 2. Click Network Configuration in the left panel. 3. Select the appropriate radio buttons in the Protocols area. 4. Click Apply. 136 Chapter 9 Performing Advanced Functions ENWW